./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6c24879c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-12 06:18:41,512 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-12 06:18:41,513 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-12 06:18:41,544 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-12 06:18:41,545 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-12 06:18:41,546 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-12 06:18:41,548 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-12 06:18:41,550 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-12 06:18:41,551 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-12 06:18:41,554 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-12 06:18:41,555 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-12 06:18:41,557 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-12 06:18:41,557 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-12 06:18:41,558 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-12 06:18:41,560 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-12 06:18:41,562 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-12 06:18:41,562 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-12 06:18:41,564 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-12 06:18:41,565 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-12 06:18:41,569 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-12 06:18:41,570 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-12 06:18:41,571 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-12 06:18:41,571 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-12 06:18:41,572 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-12 06:18:41,573 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-12 06:18:41,578 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-12 06:18:41,579 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-12 06:18:41,579 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-12 06:18:41,580 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-12 06:18:41,581 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-12 06:18:41,581 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-12 06:18:41,581 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-12 06:18:41,583 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-12 06:18:41,583 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-12 06:18:41,584 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-12 06:18:41,584 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-12 06:18:41,585 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-12 06:18:41,585 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-12 06:18:41,585 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-12 06:18:41,585 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-12 06:18:41,586 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-12 06:18:41,587 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-12 06:18:41,588 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-12 06:18:41,617 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-12 06:18:41,617 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-12 06:18:41,617 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-12 06:18:41,618 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-12 06:18:41,618 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-12 06:18:41,618 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-12 06:18:41,619 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-12 06:18:41,619 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-12 06:18:41,619 INFO L138 SettingsManager]: * Use SBE=true [2022-07-12 06:18:41,619 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-12 06:18:41,620 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-12 06:18:41,620 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-12 06:18:41,620 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-12 06:18:41,620 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-12 06:18:41,620 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-12 06:18:41,620 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-12 06:18:41,621 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-12 06:18:41,621 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-12 06:18:41,621 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-12 06:18:41,621 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-12 06:18:41,621 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-12 06:18:41,621 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-12 06:18:41,621 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-12 06:18:41,622 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-12 06:18:41,622 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:18:41,622 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-12 06:18:41,622 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-12 06:18:41,622 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-12 06:18:41,622 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-12 06:18:41,623 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-12 06:18:41,623 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-12 06:18:41,623 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-12 06:18:41,623 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-12 06:18:41,623 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 [2022-07-12 06:18:41,836 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-12 06:18:41,854 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-12 06:18:41,857 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-12 06:18:41,858 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-12 06:18:41,860 INFO L275 PluginConnector]: CDTParser initialized [2022-07-12 06:18:41,861 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2022-07-12 06:18:41,934 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/37ccc6d6d/1fd1da1046d44a078058c30bbdce4ec6/FLAGacb7ac914 [2022-07-12 06:18:42,363 INFO L306 CDTParser]: Found 1 translation units. [2022-07-12 06:18:42,363 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2022-07-12 06:18:42,371 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/37ccc6d6d/1fd1da1046d44a078058c30bbdce4ec6/FLAGacb7ac914 [2022-07-12 06:18:42,754 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/37ccc6d6d/1fd1da1046d44a078058c30bbdce4ec6 [2022-07-12 06:18:42,755 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-12 06:18:42,756 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-12 06:18:42,762 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-12 06:18:42,762 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-12 06:18:42,764 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-12 06:18:42,765 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:18:42" (1/1) ... [2022-07-12 06:18:42,766 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@30bcef98 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:42, skipping insertion in model container [2022-07-12 06:18:42,766 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:18:42" (1/1) ... [2022-07-12 06:18:42,770 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-12 06:18:42,812 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 06:18:43,032 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2022-07-12 06:18:43,044 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:18:43,052 INFO L203 MainTranslator]: Completed pre-run [2022-07-12 06:18:43,115 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2022-07-12 06:18:43,116 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:18:43,127 INFO L208 MainTranslator]: Completed translation [2022-07-12 06:18:43,128 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:43 WrapperNode [2022-07-12 06:18:43,128 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-12 06:18:43,129 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-12 06:18:43,129 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-12 06:18:43,129 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-12 06:18:43,134 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:43" (1/1) ... [2022-07-12 06:18:43,158 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:43" (1/1) ... [2022-07-12 06:18:43,181 INFO L137 Inliner]: procedures = 58, calls = 160, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 280 [2022-07-12 06:18:43,183 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-12 06:18:43,184 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-12 06:18:43,184 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-12 06:18:43,185 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-12 06:18:43,191 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:43" (1/1) ... [2022-07-12 06:18:43,191 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:43" (1/1) ... [2022-07-12 06:18:43,201 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:43" (1/1) ... [2022-07-12 06:18:43,208 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:43" (1/1) ... [2022-07-12 06:18:43,212 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:43" (1/1) ... [2022-07-12 06:18:43,216 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:43" (1/1) ... [2022-07-12 06:18:43,217 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:43" (1/1) ... [2022-07-12 06:18:43,219 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-12 06:18:43,220 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-12 06:18:43,220 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-12 06:18:43,220 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-12 06:18:43,221 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:43" (1/1) ... [2022-07-12 06:18:43,231 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:18:43,238 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:18:43,248 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-12 06:18:43,249 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-12 06:18:43,271 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-12 06:18:43,271 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-12 06:18:43,271 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-12 06:18:43,271 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-12 06:18:43,271 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-12 06:18:43,272 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-12 06:18:43,272 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-12 06:18:43,272 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-12 06:18:43,272 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-12 06:18:43,272 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:18:43,272 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:18:43,272 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-12 06:18:43,272 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-12 06:18:43,272 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-07-12 06:18:43,273 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-07-12 06:18:43,273 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-12 06:18:43,273 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-12 06:18:43,273 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-12 06:18:43,273 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-12 06:18:43,273 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-12 06:18:43,273 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-12 06:18:43,273 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-12 06:18:43,323 INFO L234 CfgBuilder]: Building ICFG [2022-07-12 06:18:43,325 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-12 06:18:43,578 INFO L275 CfgBuilder]: Performing block encoding [2022-07-12 06:18:43,583 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-12 06:18:43,584 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-12 06:18:43,585 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:18:43 BoogieIcfgContainer [2022-07-12 06:18:43,585 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-12 06:18:43,586 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-12 06:18:43,586 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-12 06:18:43,594 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-12 06:18:43,594 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.07 06:18:42" (1/3) ... [2022-07-12 06:18:43,595 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5f505a64 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:18:43, skipping insertion in model container [2022-07-12 06:18:43,595 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:43" (2/3) ... [2022-07-12 06:18:43,595 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5f505a64 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:18:43, skipping insertion in model container [2022-07-12 06:18:43,595 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:18:43" (3/3) ... [2022-07-12 06:18:43,596 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product54.cil.c [2022-07-12 06:18:43,607 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-12 06:18:43,608 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-12 06:18:43,663 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-12 06:18:43,670 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@f39e8f7, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@5e12ae8d [2022-07-12 06:18:43,670 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-12 06:18:43,678 INFO L276 IsEmpty]: Start isEmpty. Operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-07-12 06:18:43,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-12 06:18:43,694 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:43,695 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:43,695 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:43,700 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:43,701 INFO L85 PathProgramCache]: Analyzing trace with hash 244440816, now seen corresponding path program 1 times [2022-07-12 06:18:43,707 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:43,707 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1604034945] [2022-07-12 06:18:43,707 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:43,708 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:43,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-12 06:18:43,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:43,927 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:43,927 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:43,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1604034945] [2022-07-12 06:18:43,928 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1604034945] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:43,929 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:43,929 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-12 06:18:43,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [414938577] [2022-07-12 06:18:43,931 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:43,935 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-12 06:18:43,935 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:43,957 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-12 06:18:43,957 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:18:43,959 INFO L87 Difference]: Start difference. First operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:43,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:43,992 INFO L93 Difference]: Finished difference Result 197 states and 268 transitions. [2022-07-12 06:18:43,992 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-12 06:18:43,993 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-12 06:18:43,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:44,001 INFO L225 Difference]: With dead ends: 197 [2022-07-12 06:18:44,002 INFO L226 Difference]: Without dead ends: 94 [2022-07-12 06:18:44,005 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:18:44,010 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:44,011 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:44,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-07-12 06:18:44,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2022-07-12 06:18:44,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 69 states have (on average 1.318840579710145) internal successors, (91), 78 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-12 06:18:44,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 122 transitions. [2022-07-12 06:18:44,053 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 122 transitions. Word has length 25 [2022-07-12 06:18:44,053 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:44,054 INFO L495 AbstractCegarLoop]: Abstraction has 94 states and 122 transitions. [2022-07-12 06:18:44,054 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:44,054 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2022-07-12 06:18:44,056 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-12 06:18:44,056 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:44,056 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:44,056 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-12 06:18:44,057 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:44,057 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:44,057 INFO L85 PathProgramCache]: Analyzing trace with hash -1307515066, now seen corresponding path program 1 times [2022-07-12 06:18:44,058 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:44,058 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [854335163] [2022-07-12 06:18:44,058 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:44,058 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:44,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-12 06:18:44,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,124 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:44,124 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:44,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [854335163] [2022-07-12 06:18:44,125 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [854335163] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:44,125 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:44,125 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-12 06:18:44,125 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [989887204] [2022-07-12 06:18:44,126 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:44,127 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 06:18:44,127 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:44,128 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 06:18:44,128 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:18:44,129 INFO L87 Difference]: Start difference. First operand 94 states and 122 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:44,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:44,159 INFO L93 Difference]: Finished difference Result 152 states and 198 transitions. [2022-07-12 06:18:44,160 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 06:18:44,160 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-12 06:18:44,161 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:44,163 INFO L225 Difference]: With dead ends: 152 [2022-07-12 06:18:44,164 INFO L226 Difference]: Without dead ends: 85 [2022-07-12 06:18:44,165 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:18:44,167 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 13 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 201 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:44,167 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 201 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:44,169 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-07-12 06:18:44,176 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-07-12 06:18:44,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 72 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-12 06:18:44,186 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-07-12 06:18:44,186 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 26 [2022-07-12 06:18:44,186 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:44,186 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-07-12 06:18:44,187 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:44,187 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-07-12 06:18:44,188 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-07-12 06:18:44,188 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:44,188 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:44,188 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-12 06:18:44,188 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:44,189 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:44,189 INFO L85 PathProgramCache]: Analyzing trace with hash 1771610293, now seen corresponding path program 1 times [2022-07-12 06:18:44,189 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:44,189 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [841339019] [2022-07-12 06:18:44,190 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:44,190 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:44,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:18:44,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,274 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:44,276 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:44,276 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [841339019] [2022-07-12 06:18:44,276 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [841339019] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:44,276 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:44,277 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:18:44,277 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1830780345] [2022-07-12 06:18:44,277 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:44,278 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:18:44,278 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:44,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:18:44,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:18:44,279 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:44,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:44,322 INFO L93 Difference]: Finished difference Result 162 states and 213 transitions. [2022-07-12 06:18:44,322 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 06:18:44,322 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-07-12 06:18:44,323 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:44,324 INFO L225 Difference]: With dead ends: 162 [2022-07-12 06:18:44,324 INFO L226 Difference]: Without dead ends: 85 [2022-07-12 06:18:44,324 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:44,325 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 137 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 275 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:44,326 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 275 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:44,326 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-07-12 06:18:44,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-07-12 06:18:44,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 72 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-12 06:18:44,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 109 transitions. [2022-07-12 06:18:44,333 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 109 transitions. Word has length 31 [2022-07-12 06:18:44,334 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:44,334 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 109 transitions. [2022-07-12 06:18:44,334 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:44,334 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2022-07-12 06:18:44,335 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-12 06:18:44,335 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:44,335 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:44,336 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-12 06:18:44,336 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:44,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:44,336 INFO L85 PathProgramCache]: Analyzing trace with hash 1359704802, now seen corresponding path program 1 times [2022-07-12 06:18:44,337 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:44,337 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [779240663] [2022-07-12 06:18:44,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:44,337 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:44,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:18:44,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-12 06:18:44,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-12 06:18:44,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,393 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:18:44,393 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:44,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [779240663] [2022-07-12 06:18:44,393 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [779240663] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:44,394 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:44,394 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-12 06:18:44,394 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1560381600] [2022-07-12 06:18:44,394 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:44,394 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-12 06:18:44,394 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:44,395 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-12 06:18:44,395 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-12 06:18:44,395 INFO L87 Difference]: Start difference. First operand 85 states and 109 transitions. Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-12 06:18:44,538 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:44,539 INFO L93 Difference]: Finished difference Result 242 states and 316 transitions. [2022-07-12 06:18:44,539 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 06:18:44,539 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 44 [2022-07-12 06:18:44,539 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:44,541 INFO L225 Difference]: With dead ends: 242 [2022-07-12 06:18:44,541 INFO L226 Difference]: Without dead ends: 165 [2022-07-12 06:18:44,542 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:18:44,543 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 150 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:44,544 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [156 Valid, 234 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:18:44,544 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2022-07-12 06:18:44,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 159. [2022-07-12 06:18:44,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 119 states have (on average 1.2941176470588236) internal successors, (154), 127 states have internal predecessors, (154), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-07-12 06:18:44,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 203 transitions. [2022-07-12 06:18:44,569 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 203 transitions. Word has length 44 [2022-07-12 06:18:44,569 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:44,569 INFO L495 AbstractCegarLoop]: Abstraction has 159 states and 203 transitions. [2022-07-12 06:18:44,569 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-07-12 06:18:44,569 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 203 transitions. [2022-07-12 06:18:44,570 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-07-12 06:18:44,571 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:44,571 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:44,571 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-12 06:18:44,571 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:44,571 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:44,572 INFO L85 PathProgramCache]: Analyzing trace with hash 179521665, now seen corresponding path program 1 times [2022-07-12 06:18:44,572 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:44,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [722009122] [2022-07-12 06:18:44,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:44,572 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:44,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:18:44,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:44,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-12 06:18:44,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,659 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:44,661 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:44,661 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [722009122] [2022-07-12 06:18:44,661 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [722009122] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:44,664 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:44,664 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:18:44,664 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1752751535] [2022-07-12 06:18:44,665 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:44,665 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:18:44,665 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:44,666 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:18:44,666 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:18:44,666 INFO L87 Difference]: Start difference. First operand 159 states and 203 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-12 06:18:44,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:44,817 INFO L93 Difference]: Finished difference Result 318 states and 414 transitions. [2022-07-12 06:18:44,817 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:18:44,818 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2022-07-12 06:18:44,818 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:44,819 INFO L225 Difference]: With dead ends: 318 [2022-07-12 06:18:44,819 INFO L226 Difference]: Without dead ends: 167 [2022-07-12 06:18:44,820 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:18:44,821 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 70 mSDsluCounter, 328 mSDsCounter, 0 mSdLazyCounter, 137 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 438 SdHoareTripleChecker+Invalid, 160 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 137 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:44,821 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 438 Invalid, 160 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:18:44,822 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2022-07-12 06:18:44,831 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 162. [2022-07-12 06:18:44,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 122 states have (on average 1.2868852459016393) internal successors, (157), 130 states have internal predecessors, (157), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-07-12 06:18:44,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 206 transitions. [2022-07-12 06:18:44,833 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 206 transitions. Word has length 50 [2022-07-12 06:18:44,833 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:44,833 INFO L495 AbstractCegarLoop]: Abstraction has 162 states and 206 transitions. [2022-07-12 06:18:44,833 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-12 06:18:44,834 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 206 transitions. [2022-07-12 06:18:44,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-07-12 06:18:44,835 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:44,835 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:44,835 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-12 06:18:44,835 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:44,835 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:44,836 INFO L85 PathProgramCache]: Analyzing trace with hash 602223491, now seen corresponding path program 1 times [2022-07-12 06:18:44,836 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:44,836 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [845348999] [2022-07-12 06:18:44,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:44,836 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:44,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:18:44,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:44,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-12 06:18:44,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:44,920 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:44,920 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:44,920 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [845348999] [2022-07-12 06:18:44,921 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [845348999] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:44,921 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:44,921 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:18:44,921 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1206480436] [2022-07-12 06:18:44,921 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:44,922 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:18:44,922 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:44,922 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:18:44,923 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:18:44,923 INFO L87 Difference]: Start difference. First operand 162 states and 206 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-12 06:18:45,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:45,026 INFO L93 Difference]: Finished difference Result 326 states and 428 transitions. [2022-07-12 06:18:45,026 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 06:18:45,027 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2022-07-12 06:18:45,027 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:45,030 INFO L225 Difference]: With dead ends: 326 [2022-07-12 06:18:45,030 INFO L226 Difference]: Without dead ends: 172 [2022-07-12 06:18:45,031 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:45,038 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 73 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 103 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 343 SdHoareTripleChecker+Invalid, 122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 103 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:45,041 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 343 Invalid, 122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:18:45,043 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2022-07-12 06:18:45,052 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 164. [2022-07-12 06:18:45,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 124 states have (on average 1.282258064516129) internal successors, (159), 132 states have internal predecessors, (159), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-07-12 06:18:45,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 208 transitions. [2022-07-12 06:18:45,060 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 208 transitions. Word has length 50 [2022-07-12 06:18:45,060 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:45,060 INFO L495 AbstractCegarLoop]: Abstraction has 164 states and 208 transitions. [2022-07-12 06:18:45,060 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-12 06:18:45,060 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 208 transitions. [2022-07-12 06:18:45,073 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-07-12 06:18:45,073 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:45,073 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:45,074 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-12 06:18:45,074 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:45,074 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:45,074 INFO L85 PathProgramCache]: Analyzing trace with hash -1203214843, now seen corresponding path program 1 times [2022-07-12 06:18:45,075 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:45,075 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2108477615] [2022-07-12 06:18:45,075 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:45,075 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:45,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:18:45,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:45,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-12 06:18:45,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,161 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:45,162 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:45,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2108477615] [2022-07-12 06:18:45,162 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2108477615] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:45,162 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:45,162 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:18:45,162 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [693181266] [2022-07-12 06:18:45,163 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:45,163 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:18:45,163 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:45,163 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:18:45,164 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:18:45,164 INFO L87 Difference]: Start difference. First operand 164 states and 208 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-12 06:18:45,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:45,372 INFO L93 Difference]: Finished difference Result 458 states and 602 transitions. [2022-07-12 06:18:45,373 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:18:45,373 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 50 [2022-07-12 06:18:45,373 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:45,376 INFO L225 Difference]: With dead ends: 458 [2022-07-12 06:18:45,376 INFO L226 Difference]: Without dead ends: 302 [2022-07-12 06:18:45,377 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:45,380 INFO L413 NwaCegarLoop]: 163 mSDtfsCounter, 221 mSDsluCounter, 197 mSDsCounter, 0 mSdLazyCounter, 171 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 228 SdHoareTripleChecker+Valid, 360 SdHoareTripleChecker+Invalid, 236 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 171 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:45,382 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [228 Valid, 360 Invalid, 236 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 171 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:45,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 302 states. [2022-07-12 06:18:45,401 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 302 to 294. [2022-07-12 06:18:45,401 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 221 states have (on average 1.257918552036199) internal successors, (278), 233 states have internal predecessors, (278), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2022-07-12 06:18:45,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 376 transitions. [2022-07-12 06:18:45,403 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 376 transitions. Word has length 50 [2022-07-12 06:18:45,403 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:45,403 INFO L495 AbstractCegarLoop]: Abstraction has 294 states and 376 transitions. [2022-07-12 06:18:45,403 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-12 06:18:45,403 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 376 transitions. [2022-07-12 06:18:45,404 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-12 06:18:45,404 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:45,404 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:45,404 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-12 06:18:45,405 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:45,405 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:45,405 INFO L85 PathProgramCache]: Analyzing trace with hash 1971090006, now seen corresponding path program 1 times [2022-07-12 06:18:45,405 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:45,405 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2000987441] [2022-07-12 06:18:45,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:45,406 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:45,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 06:18:45,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:45,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:45,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-07-12 06:18:45,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,451 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:45,451 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:45,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2000987441] [2022-07-12 06:18:45,451 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2000987441] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:45,451 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:45,451 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 06:18:45,452 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1297341001] [2022-07-12 06:18:45,452 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:45,452 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:18:45,452 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:45,452 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:18:45,453 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:45,453 INFO L87 Difference]: Start difference. First operand 294 states and 376 transitions. Second operand has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:18:45,644 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:45,644 INFO L93 Difference]: Finished difference Result 866 states and 1136 transitions. [2022-07-12 06:18:45,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-12 06:18:45,644 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2022-07-12 06:18:45,645 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:45,648 INFO L225 Difference]: With dead ends: 866 [2022-07-12 06:18:45,648 INFO L226 Difference]: Without dead ends: 580 [2022-07-12 06:18:45,649 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-07-12 06:18:45,650 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 179 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 233 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 425 SdHoareTripleChecker+Invalid, 296 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 233 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:45,650 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [187 Valid, 425 Invalid, 296 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 233 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:18:45,651 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 580 states. [2022-07-12 06:18:45,675 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 580 to 560. [2022-07-12 06:18:45,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 560 states, 415 states have (on average 1.219277108433735) internal successors, (506), 438 states have internal predecessors, (506), 72 states have call successors, (72), 66 states have call predecessors, (72), 72 states have return successors, (129), 74 states have call predecessors, (129), 72 states have call successors, (129) [2022-07-12 06:18:45,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 560 states to 560 states and 707 transitions. [2022-07-12 06:18:45,678 INFO L78 Accepts]: Start accepts. Automaton has 560 states and 707 transitions. Word has length 52 [2022-07-12 06:18:45,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:45,679 INFO L495 AbstractCegarLoop]: Abstraction has 560 states and 707 transitions. [2022-07-12 06:18:45,679 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:18:45,679 INFO L276 IsEmpty]: Start isEmpty. Operand 560 states and 707 transitions. [2022-07-12 06:18:45,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-12 06:18:45,680 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:45,680 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:45,680 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-12 06:18:45,680 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:45,681 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:45,681 INFO L85 PathProgramCache]: Analyzing trace with hash 1067067282, now seen corresponding path program 1 times [2022-07-12 06:18:45,681 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:45,681 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [51041837] [2022-07-12 06:18:45,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:45,681 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:45,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-12 06:18:45,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-12 06:18:45,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:45,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:45,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-12 06:18:45,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:45,771 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:45,771 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:45,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [51041837] [2022-07-12 06:18:45,771 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [51041837] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:45,771 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:45,771 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 06:18:45,772 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1086398432] [2022-07-12 06:18:45,772 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:45,772 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:18:45,772 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:45,772 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:18:45,772 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:45,772 INFO L87 Difference]: Start difference. First operand 560 states and 707 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 06:18:46,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:46,123 INFO L93 Difference]: Finished difference Result 1128 states and 1437 transitions. [2022-07-12 06:18:46,123 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-07-12 06:18:46,123 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2022-07-12 06:18:46,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:46,128 INFO L225 Difference]: With dead ends: 1128 [2022-07-12 06:18:46,128 INFO L226 Difference]: Without dead ends: 576 [2022-07-12 06:18:46,130 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2022-07-12 06:18:46,131 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 205 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 393 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 204 SdHoareTripleChecker+Invalid, 475 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 393 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:46,132 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [207 Valid, 204 Invalid, 475 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 393 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:46,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 576 states. [2022-07-12 06:18:46,157 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 576 to 556. [2022-07-12 06:18:46,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 556 states, 411 states have (on average 1.2019464720194648) internal successors, (494), 434 states have internal predecessors, (494), 72 states have call successors, (72), 66 states have call predecessors, (72), 72 states have return successors, (129), 74 states have call predecessors, (129), 72 states have call successors, (129) [2022-07-12 06:18:46,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 556 states to 556 states and 695 transitions. [2022-07-12 06:18:46,161 INFO L78 Accepts]: Start accepts. Automaton has 556 states and 695 transitions. Word has length 56 [2022-07-12 06:18:46,161 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:46,161 INFO L495 AbstractCegarLoop]: Abstraction has 556 states and 695 transitions. [2022-07-12 06:18:46,161 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 06:18:46,161 INFO L276 IsEmpty]: Start isEmpty. Operand 556 states and 695 transitions. [2022-07-12 06:18:46,162 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-07-12 06:18:46,162 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:46,162 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:46,162 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-12 06:18:46,162 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:46,162 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:46,162 INFO L85 PathProgramCache]: Analyzing trace with hash 2127597403, now seen corresponding path program 1 times [2022-07-12 06:18:46,162 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:46,163 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [70143436] [2022-07-12 06:18:46,163 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:46,163 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:46,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:18:46,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-12 06:18:46,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-12 06:18:46,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:46,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-07-12 06:18:46,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,226 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:46,226 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:46,226 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [70143436] [2022-07-12 06:18:46,226 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [70143436] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:46,227 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:46,227 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:18:46,227 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [953539754] [2022-07-12 06:18:46,227 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:46,227 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:18:46,227 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:46,227 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:18:46,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:18:46,228 INFO L87 Difference]: Start difference. First operand 556 states and 695 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 06:18:46,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:46,618 INFO L93 Difference]: Finished difference Result 1084 states and 1428 transitions. [2022-07-12 06:18:46,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-12 06:18:46,619 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2022-07-12 06:18:46,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:46,623 INFO L225 Difference]: With dead ends: 1084 [2022-07-12 06:18:46,623 INFO L226 Difference]: Without dead ends: 1082 [2022-07-12 06:18:46,623 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-07-12 06:18:46,624 INFO L413 NwaCegarLoop]: 101 mSDtfsCounter, 455 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 308 mSolverCounterSat, 245 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 456 SdHoareTripleChecker+Valid, 181 SdHoareTripleChecker+Invalid, 553 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 245 IncrementalHoareTripleChecker+Valid, 308 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:46,624 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [456 Valid, 181 Invalid, 553 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [245 Valid, 308 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-12 06:18:46,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1082 states. [2022-07-12 06:18:46,666 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1082 to 842. [2022-07-12 06:18:46,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 842 states, 620 states have (on average 1.206451612903226) internal successors, (748), 664 states have internal predecessors, (748), 114 states have call successors, (114), 84 states have call predecessors, (114), 107 states have return successors, (244), 116 states have call predecessors, (244), 114 states have call successors, (244) [2022-07-12 06:18:46,672 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 842 states to 842 states and 1106 transitions. [2022-07-12 06:18:46,672 INFO L78 Accepts]: Start accepts. Automaton has 842 states and 1106 transitions. Word has length 58 [2022-07-12 06:18:46,672 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:46,672 INFO L495 AbstractCegarLoop]: Abstraction has 842 states and 1106 transitions. [2022-07-12 06:18:46,672 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-12 06:18:46,672 INFO L276 IsEmpty]: Start isEmpty. Operand 842 states and 1106 transitions. [2022-07-12 06:18:46,674 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2022-07-12 06:18:46,675 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:46,675 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:46,675 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-12 06:18:46,675 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:46,675 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:46,675 INFO L85 PathProgramCache]: Analyzing trace with hash -582322242, now seen corresponding path program 1 times [2022-07-12 06:18:46,675 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:46,675 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1864337040] [2022-07-12 06:18:46,675 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:46,676 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:46,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:18:46,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-12 06:18:46,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-12 06:18:46,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 06:18:46,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:46,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-12 06:18:46,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-07-12 06:18:46,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:46,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-07-12 06:18:46,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,760 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 21 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-07-12 06:18:46,760 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:46,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1864337040] [2022-07-12 06:18:46,760 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1864337040] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:18:46,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1830289428] [2022-07-12 06:18:46,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:46,760 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:18:46,761 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:18:46,762 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:18:46,763 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-12 06:18:46,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:46,859 INFO L263 TraceCheckSpWp]: Trace formula consists of 492 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-12 06:18:46,865 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:18:46,968 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:46,969 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 06:18:46,969 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1830289428] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:46,969 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-12 06:18:46,970 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 10 [2022-07-12 06:18:46,970 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1803350648] [2022-07-12 06:18:46,970 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:46,971 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 06:18:46,971 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:46,971 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 06:18:46,971 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:18:46,971 INFO L87 Difference]: Start difference. First operand 842 states and 1106 transitions. Second operand has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-12 06:18:47,024 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:47,024 INFO L93 Difference]: Finished difference Result 1458 states and 1956 transitions. [2022-07-12 06:18:47,024 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 06:18:47,025 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 102 [2022-07-12 06:18:47,025 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:47,028 INFO L225 Difference]: With dead ends: 1458 [2022-07-12 06:18:47,029 INFO L226 Difference]: Without dead ends: 730 [2022-07-12 06:18:47,031 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-07-12 06:18:47,032 INFO L413 NwaCegarLoop]: 152 mSDtfsCounter, 51 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:47,032 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 222 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:47,033 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 730 states. [2022-07-12 06:18:47,069 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 730 to 730. [2022-07-12 06:18:47,070 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 730 states, 537 states have (on average 1.1824953445065176) internal successors, (635), 576 states have internal predecessors, (635), 99 states have call successors, (99), 77 states have call predecessors, (99), 93 states have return successors, (155), 99 states have call predecessors, (155), 99 states have call successors, (155) [2022-07-12 06:18:47,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 730 states to 730 states and 889 transitions. [2022-07-12 06:18:47,073 INFO L78 Accepts]: Start accepts. Automaton has 730 states and 889 transitions. Word has length 102 [2022-07-12 06:18:47,073 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:47,073 INFO L495 AbstractCegarLoop]: Abstraction has 730 states and 889 transitions. [2022-07-12 06:18:47,074 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-12 06:18:47,074 INFO L276 IsEmpty]: Start isEmpty. Operand 730 states and 889 transitions. [2022-07-12 06:18:47,075 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2022-07-12 06:18:47,076 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:47,076 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:47,118 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-12 06:18:47,290 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-12 06:18:47,290 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:47,291 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:47,291 INFO L85 PathProgramCache]: Analyzing trace with hash 1563413676, now seen corresponding path program 1 times [2022-07-12 06:18:47,291 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:47,291 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [523189415] [2022-07-12 06:18:47,291 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:47,291 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:47,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:18:47,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-12 06:18:47,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-12 06:18:47,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 06:18:47,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:47,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-12 06:18:47,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-07-12 06:18:47,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-07-12 06:18:47,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-12 06:18:47,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,406 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:47,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-07-12 06:18:47,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,408 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-07-12 06:18:47,409 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:47,409 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [523189415] [2022-07-12 06:18:47,409 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [523189415] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:18:47,409 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1414572712] [2022-07-12 06:18:47,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:47,409 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:18:47,409 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:18:47,424 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:18:47,439 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-12 06:18:47,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,537 INFO L263 TraceCheckSpWp]: Trace formula consists of 515 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-12 06:18:47,541 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:18:47,666 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-12 06:18:47,666 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 06:18:47,667 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1414572712] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:47,667 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-12 06:18:47,667 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2022-07-12 06:18:47,667 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [403234196] [2022-07-12 06:18:47,667 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:47,668 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:18:47,668 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:47,668 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:18:47,668 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2022-07-12 06:18:47,669 INFO L87 Difference]: Start difference. First operand 730 states and 889 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-07-12 06:18:47,766 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:47,766 INFO L93 Difference]: Finished difference Result 1315 states and 1596 transitions. [2022-07-12 06:18:47,767 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:18:47,767 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 112 [2022-07-12 06:18:47,767 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:47,768 INFO L225 Difference]: With dead ends: 1315 [2022-07-12 06:18:47,768 INFO L226 Difference]: Without dead ends: 0 [2022-07-12 06:18:47,770 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 124 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2022-07-12 06:18:47,771 INFO L413 NwaCegarLoop]: 185 mSDtfsCounter, 46 mSDsluCounter, 784 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 969 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:47,771 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 969 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:47,771 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-12 06:18:47,772 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-12 06:18:47,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:18:47,772 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-12 06:18:47,772 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 112 [2022-07-12 06:18:47,772 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:47,772 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-12 06:18:47,773 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-07-12 06:18:47,773 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-12 06:18:47,773 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-12 06:18:47,775 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-12 06:18:47,793 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-07-12 06:18:47,991 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-12 06:18:47,993 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-12 06:18:52,042 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 758 765) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2022-07-12 06:18:52,042 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 758 765) no Hoare annotation was computed. [2022-07-12 06:18:52,042 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 758 765) no Hoare annotation was computed. [2022-07-12 06:18:52,042 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 665 671) no Hoare annotation was computed. [2022-07-12 06:18:52,042 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 665 671) the Hoare annotation is: true [2022-07-12 06:18:52,043 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 896 907) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse6 (not (<= 1 ~pumpRunning~0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse3 .cse4) (or .cse1 (not (<= 2 ~waterLevel~0)) .cse6 .cse2 .cse3) (or .cse5 .cse1 .cse6 .cse3 .cse4))) [2022-07-12 06:18:52,043 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 896 907) no Hoare annotation was computed. [2022-07-12 06:18:52,043 INFO L899 garLoopResultBuilder]: For program point L900-1(lines 896 907) no Hoare annotation was computed. [2022-07-12 06:18:52,043 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 908 916) the Hoare annotation is: true [2022-07-12 06:18:52,043 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 908 916) no Hoare annotation was computed. [2022-07-12 06:18:52,043 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 908 916) no Hoare annotation was computed. [2022-07-12 06:18:52,043 INFO L899 garLoopResultBuilder]: For program point L733(lines 733 741) no Hoare annotation was computed. [2022-07-12 06:18:52,043 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 746) no Hoare annotation was computed. [2022-07-12 06:18:52,044 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 190) no Hoare annotation was computed. [2022-07-12 06:18:52,044 INFO L899 garLoopResultBuilder]: For program point L176(lines 176 193) no Hoare annotation was computed. [2022-07-12 06:18:52,044 INFO L895 garLoopResultBuilder]: At program point L176-1(lines 168 196) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse13 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse0 (and .cse7 .cse5 .cse13 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|) (not .cse3))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not .cse13)) (.cse11 (<= 1 ~pumpRunning~0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) .cse3 (and .cse7 .cse5 .cse6)) (or .cse8 .cse9 (and .cse7 .cse5 .cse10) (and .cse11 .cse12 .cse10) .cse2 .cse3) (or .cse9 .cse0 .cse1 .cse2 .cse3) (or (and .cse11 .cse5 .cse12 .cse10 .cse6) .cse8 .cse9 (and .cse7 .cse5 .cse10 .cse6) .cse4 .cse3)))) [2022-07-12 06:18:52,044 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 641 664) no Hoare annotation was computed. [2022-07-12 06:18:52,044 INFO L895 garLoopResultBuilder]: At program point L771(line 771) the Hoare annotation is: (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse2 .cse1 .cse5 .cse4) (or .cse6 .cse0 .cse3 .cse4) (or .cse6 .cse0 .cse5 .cse4) (or .cse2 .cse1 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-12 06:18:52,044 INFO L899 garLoopResultBuilder]: For program point L771-1(line 771) no Hoare annotation was computed. [2022-07-12 06:18:52,044 INFO L899 garLoopResultBuilder]: For program point L181(lines 181 187) no Hoare annotation was computed. [2022-07-12 06:18:52,044 INFO L899 garLoopResultBuilder]: For program point L652-1(lines 652 658) no Hoare annotation was computed. [2022-07-12 06:18:52,045 INFO L895 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 .cse2) (or .cse3 .cse0 .cse4 .cse2) (or .cse0 .cse4 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse3 .cse4 .cse2) (or .cse5 .cse3 .cse1 .cse2))) [2022-07-12 06:18:52,045 INFO L895 garLoopResultBuilder]: At program point L735(line 735) the Hoare annotation is: (let ((.cse1 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse2 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= 0 ~systemActive~0))) (and (or (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or (and .cse0 .cse1 .cse2) .cse4 .cse5 .cse6 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse4 .cse7 .cse6) (or .cse8 .cse3 .cse5 .cse6) (or .cse8 .cse3 .cse7 .cse6))) [2022-07-12 06:18:52,045 INFO L899 garLoopResultBuilder]: For program point L1012(line 1012) no Hoare annotation was computed. [2022-07-12 06:18:52,045 INFO L895 garLoopResultBuilder]: At program point L174(line 174) the Hoare annotation is: (let ((.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse4 (and .cse9 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (and .cse9 .cse13)) (.cse11 (<= 1 ~pumpRunning~0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse6 .cse7 .cse8 .cse3) (or .cse5 .cse0 .cse6 .cse7 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse1 .cse8 .cse3) (or .cse5 .cse0 .cse10 (and .cse11 .cse6 .cse12 .cse13) .cse2 .cse3) (or .cse5 .cse0 .cse10 (and .cse11 .cse12 .cse13) .cse8 .cse3)))) [2022-07-12 06:18:52,045 INFO L899 garLoopResultBuilder]: For program point L174-1(line 174) no Hoare annotation was computed. [2022-07-12 06:18:52,045 INFO L899 garLoopResultBuilder]: For program point L876(lines 876 880) no Hoare annotation was computed. [2022-07-12 06:18:52,045 INFO L895 garLoopResultBuilder]: At program point L876-2(lines 872 883) the Hoare annotation is: (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse2 .cse1 .cse5 .cse4) (or .cse6 .cse0 .cse3 .cse4) (or .cse6 .cse0 .cse5 .cse4) (or .cse2 .cse1 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-12 06:18:52,046 INFO L895 garLoopResultBuilder]: At program point L744(line 744) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4) (or .cse0 .cse1 (and .cse5 .cse6) .cse3 .cse4) (or .cse0 .cse1 (and .cse5 .cse2 .cse6) .cse7 .cse4) (or .cse1 .cse8 .cse7 .cse4) (or .cse8 .cse7 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse8 .cse3 .cse4))) [2022-07-12 06:18:52,046 INFO L895 garLoopResultBuilder]: At program point L744-1(lines 725 749) the Hoare annotation is: (let ((.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse4 (and .cse9 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (and .cse9 .cse13)) (.cse11 (<= 1 ~pumpRunning~0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse6 .cse7 .cse8 .cse3) (or .cse5 .cse0 .cse6 .cse7 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse1 .cse8 .cse3) (or .cse5 .cse0 .cse10 (and .cse11 .cse6 .cse12 .cse13) .cse2 .cse3) (or .cse5 .cse0 .cse10 (and .cse11 .cse12 .cse13) .cse8 .cse3)))) [2022-07-12 06:18:52,046 INFO L895 garLoopResultBuilder]: At program point L773(lines 766 776) the Hoare annotation is: (let ((.cse3 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0) .cse3) .cse4) (or .cse2 .cse0 .cse6 .cse4) (or .cse7 .cse5 .cse1 .cse4) (or .cse7 .cse5 .cse6 .cse4))) [2022-07-12 06:18:52,046 INFO L899 garLoopResultBuilder]: For program point L645-1(lines 644 663) no Hoare annotation was computed. [2022-07-12 06:18:52,046 INFO L895 garLoopResultBuilder]: At program point L1013(lines 1008 1015) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse3) (or .cse5 .cse0 .cse2 .cse3) (or .cse5 .cse0 .cse4 .cse3))) [2022-07-12 06:18:52,046 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 641 664) the Hoare annotation is: (let ((.cse6 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (and .cse5 .cse7)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (and .cse5 .cse6 .cse7) .cse8 .cse0 .cse4 .cse3) (or .cse9 .cse8 .cse10 .cse4 .cse3) (or .cse9 .cse8 .cse10 .cse1 .cse3)))) [2022-07-12 06:18:52,046 INFO L895 garLoopResultBuilder]: At program point L782(lines 777 785) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse11 (<= 1 ~methaneLevelCritical~0)) (.cse10 (= |timeShift_isPumpRunning_#res#1| 0))) (let ((.cse5 (and .cse9 .cse11 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|) .cse10)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse3 (not .cse11)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse3 .cse4) (or .cse6 .cse7 .cse4) (or .cse5 .cse6 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 (and (<= 1 ~pumpRunning~0) .cse2 (<= 2 ~waterLevel~0) .cse8) .cse3 (and .cse9 .cse10 .cse8) .cse4)) (or .cse0 .cse1 .cse7 .cse4)))) [2022-07-12 06:18:52,047 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 641 664) no Hoare annotation was computed. [2022-07-12 06:18:52,047 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1012) no Hoare annotation was computed. [2022-07-12 06:18:52,047 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-07-12 06:18:52,047 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-07-12 06:18:52,047 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-07-12 06:18:52,047 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-07-12 06:18:52,047 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-07-12 06:18:52,047 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-07-12 06:18:52,048 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-07-12 06:18:52,048 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-07-12 06:18:52,048 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-07-12 06:18:52,048 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-07-12 06:18:52,048 INFO L895 garLoopResultBuilder]: At program point L865(lines 860 867) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5 .cse6) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6))) [2022-07-12 06:18:52,048 INFO L899 garLoopResultBuilder]: For program point L576(lines 575 622) no Hoare annotation was computed. [2022-07-12 06:18:52,048 INFO L902 garLoopResultBuilder]: At program point L126(lines 118 128) the Hoare annotation is: true [2022-07-12 06:18:52,048 INFO L899 garLoopResultBuilder]: For program point L605(lines 605 618) no Hoare annotation was computed. [2022-07-12 06:18:52,048 INFO L902 garLoopResultBuilder]: At program point L151(lines 132 154) the Hoare annotation is: true [2022-07-12 06:18:52,049 INFO L895 garLoopResultBuilder]: At program point L597(line 597) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5 .cse6) (and .cse7 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6))) [2022-07-12 06:18:52,049 INFO L902 garLoopResultBuilder]: At program point L626(lines 565 630) the Hoare annotation is: true [2022-07-12 06:18:52,049 INFO L899 garLoopResultBuilder]: For program point L585(lines 585 591) no Hoare annotation was computed. [2022-07-12 06:18:52,049 INFO L899 garLoopResultBuilder]: For program point L585-1(lines 585 591) no Hoare annotation was computed. [2022-07-12 06:18:52,049 INFO L899 garLoopResultBuilder]: For program point L577(lines 577 581) no Hoare annotation was computed. [2022-07-12 06:18:52,049 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-12 06:18:52,049 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-12 06:18:52,049 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-12 06:18:52,049 INFO L895 garLoopResultBuilder]: At program point L623(lines 574 624) the Hoare annotation is: false [2022-07-12 06:18:52,050 INFO L895 garLoopResultBuilder]: At program point L1003(lines 998 1006) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:18:52,050 INFO L895 garLoopResultBuilder]: At program point L165(lines 160 167) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:18:52,050 INFO L895 garLoopResultBuilder]: At program point L995(lines 991 997) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:18:52,050 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-12 06:18:52,050 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 601) no Hoare annotation was computed. [2022-07-12 06:18:52,050 INFO L899 garLoopResultBuilder]: For program point L595-1(lines 595 601) no Hoare annotation was computed. [2022-07-12 06:18:52,050 INFO L895 garLoopResultBuilder]: At program point L620(lines 575 622) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5 .cse6) (and .cse7 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6))) [2022-07-12 06:18:52,050 INFO L895 garLoopResultBuilder]: At program point L587(line 587) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5 .cse6) (and .cse7 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6))) [2022-07-12 06:18:52,050 INFO L895 garLoopResultBuilder]: At program point L988(lines 984 990) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:18:52,051 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-12 06:18:52,051 INFO L899 garLoopResultBuilder]: For program point L142(lines 142 149) no Hoare annotation was computed. [2022-07-12 06:18:52,051 INFO L899 garLoopResultBuilder]: For program point L142-2(lines 142 149) no Hoare annotation was computed. [2022-07-12 06:18:52,051 INFO L899 garLoopResultBuilder]: For program point L613(lines 613 617) no Hoare annotation was computed. [2022-07-12 06:18:52,051 INFO L895 garLoopResultBuilder]: At program point L613-2(lines 605 618) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5 .cse6) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6))) [2022-07-12 06:18:52,051 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 673 697) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3))) [2022-07-12 06:18:52,051 INFO L895 garLoopResultBuilder]: At program point L958(lines 949 962) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-07-12 06:18:52,052 INFO L895 garLoopResultBuilder]: At program point L692(line 692) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-07-12 06:18:52,052 INFO L899 garLoopResultBuilder]: For program point L692-1(lines 673 697) no Hoare annotation was computed. [2022-07-12 06:18:52,052 INFO L895 garLoopResultBuilder]: At program point L837(lines 822 840) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (not .cse4))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse4)))) [2022-07-12 06:18:52,052 INFO L899 garLoopResultBuilder]: For program point L831(lines 831 835) no Hoare annotation was computed. [2022-07-12 06:18:52,052 INFO L899 garLoopResultBuilder]: For program point L831-2(lines 831 835) no Hoare annotation was computed. [2022-07-12 06:18:52,052 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 673 697) no Hoare annotation was computed. [2022-07-12 06:18:52,052 INFO L899 garLoopResultBuilder]: For program point L953(lines 953 959) no Hoare annotation was computed. [2022-07-12 06:18:52,052 INFO L895 garLoopResultBuilder]: At program point L755(lines 750 757) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse3 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse2))) [2022-07-12 06:18:52,052 INFO L895 garLoopResultBuilder]: At program point L687(line 687) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0) (not .cse2)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse2) (or .cse0 .cse3 .cse1 .cse2)))) [2022-07-12 06:18:52,053 INFO L899 garLoopResultBuilder]: For program point L681(lines 681 689) no Hoare annotation was computed. [2022-07-12 06:18:52,053 INFO L899 garLoopResultBuilder]: For program point L677(lines 677 694) no Hoare annotation was computed. [2022-07-12 06:18:52,053 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 884 895) no Hoare annotation was computed. [2022-07-12 06:18:52,053 INFO L899 garLoopResultBuilder]: For program point L888-1(lines 884 895) no Hoare annotation was computed. [2022-07-12 06:18:52,053 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 884 895) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse6 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse2 .cse3 .cse4))) [2022-07-12 06:18:52,053 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 699 723) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3))) [2022-07-12 06:18:52,053 INFO L895 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-07-12 06:18:52,053 INFO L895 garLoopResultBuilder]: At program point L709(line 709) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-07-12 06:18:52,054 INFO L899 garLoopResultBuilder]: For program point L707(lines 707 715) no Hoare annotation was computed. [2022-07-12 06:18:52,054 INFO L899 garLoopResultBuilder]: For program point L703(lines 703 720) no Hoare annotation was computed. [2022-07-12 06:18:52,054 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 699 723) no Hoare annotation was computed. [2022-07-12 06:18:52,054 INFO L895 garLoopResultBuilder]: At program point L856(lines 841 859) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-07-12 06:18:52,054 INFO L899 garLoopResultBuilder]: For program point L850(lines 850 854) no Hoare annotation was computed. [2022-07-12 06:18:52,054 INFO L899 garLoopResultBuilder]: For program point L850-2(lines 850 854) no Hoare annotation was computed. [2022-07-12 06:18:52,054 INFO L895 garLoopResultBuilder]: At program point L718(line 718) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3))) [2022-07-12 06:18:52,054 INFO L899 garLoopResultBuilder]: For program point L718-1(lines 699 723) no Hoare annotation was computed. [2022-07-12 06:18:52,054 INFO L895 garLoopResultBuilder]: At program point L968(lines 963 971) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-07-12 06:18:52,057 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:52,058 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-12 06:18:52,080 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.07 06:18:52 BoogieIcfgContainer [2022-07-12 06:18:52,080 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-12 06:18:52,081 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-12 06:18:52,081 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-12 06:18:52,081 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-12 06:18:52,081 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:18:43" (3/4) ... [2022-07-12 06:18:52,083 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-12 06:18:52,087 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-12 06:18:52,087 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-12 06:18:52,088 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-12 06:18:52,088 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-12 06:18:52,088 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-12 06:18:52,088 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-12 06:18:52,088 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:18:52,088 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-12 06:18:52,088 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-07-12 06:18:52,094 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2022-07-12 06:18:52,101 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-12 06:18:52,101 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-12 06:18:52,102 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-12 06:18:52,102 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-12 06:18:52,102 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:18:52,103 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:18:52,121 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:18:52,122 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:18:52,122 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-12 06:18:52,123 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-07-12 06:18:52,124 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-12 06:18:52,124 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 1 <= \result) && 1 <= tmp)) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 1 <= \result) && 1 <= tmp)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:18:52,125 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-07-12 06:18:52,125 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || 0 == systemActive) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:18:52,126 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || 0 == systemActive)) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:18:52,126 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && \result == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && \result == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:18:52,126 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:18:52,126 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-07-12 06:18:52,126 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:18:52,127 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:18:52,127 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:18:52,127 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-12 06:18:52,143 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-12 06:18:52,147 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-12 06:18:52,148 INFO L158 Benchmark]: Toolchain (without parser) took 9391.21ms. Allocated memory was 140.5MB in the beginning and 205.5MB in the end (delta: 65.0MB). Free memory was 107.0MB in the beginning and 163.2MB in the end (delta: -56.2MB). Peak memory consumption was 11.4MB. Max. memory is 16.1GB. [2022-07-12 06:18:52,148 INFO L158 Benchmark]: CDTParser took 0.65ms. Allocated memory is still 92.3MB. Free memory was 50.4MB in the beginning and 50.4MB in the end (delta: 46.4kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 06:18:52,148 INFO L158 Benchmark]: CACSL2BoogieTranslator took 366.49ms. Allocated memory is still 140.5MB. Free memory was 106.8MB in the beginning and 107.0MB in the end (delta: -291.4kB). Peak memory consumption was 12.2MB. Max. memory is 16.1GB. [2022-07-12 06:18:52,148 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.57ms. Allocated memory is still 140.5MB. Free memory was 107.0MB in the beginning and 104.5MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 06:18:52,149 INFO L158 Benchmark]: Boogie Preprocessor took 34.68ms. Allocated memory is still 140.5MB. Free memory was 104.5MB in the beginning and 102.9MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 06:18:52,149 INFO L158 Benchmark]: RCFGBuilder took 365.55ms. Allocated memory is still 140.5MB. Free memory was 102.9MB in the beginning and 85.6MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-12 06:18:52,149 INFO L158 Benchmark]: TraceAbstraction took 8493.83ms. Allocated memory was 140.5MB in the beginning and 205.5MB in the end (delta: 65.0MB). Free memory was 85.2MB in the beginning and 169.5MB in the end (delta: -84.3MB). Peak memory consumption was 90.2MB. Max. memory is 16.1GB. [2022-07-12 06:18:52,149 INFO L158 Benchmark]: Witness Printer took 66.49ms. Allocated memory is still 205.5MB. Free memory was 169.5MB in the beginning and 163.2MB in the end (delta: 6.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-07-12 06:18:52,151 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.65ms. Allocated memory is still 92.3MB. Free memory was 50.4MB in the beginning and 50.4MB in the end (delta: 46.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 366.49ms. Allocated memory is still 140.5MB. Free memory was 106.8MB in the beginning and 107.0MB in the end (delta: -291.4kB). Peak memory consumption was 12.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 54.57ms. Allocated memory is still 140.5MB. Free memory was 107.0MB in the beginning and 104.5MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.68ms. Allocated memory is still 140.5MB. Free memory was 104.5MB in the beginning and 102.9MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 365.55ms. Allocated memory is still 140.5MB. Free memory was 102.9MB in the beginning and 85.6MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 8493.83ms. Allocated memory was 140.5MB in the beginning and 205.5MB in the end (delta: 65.0MB). Free memory was 85.2MB in the beginning and 169.5MB in the end (delta: -84.3MB). Peak memory consumption was 90.2MB. Max. memory is 16.1GB. * Witness Printer took 66.49ms. Allocated memory is still 205.5MB. Free memory was 169.5MB in the beginning and 163.2MB in the end (delta: 6.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1012]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 103 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.4s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1635 SdHoareTripleChecker+Valid, 1.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1600 mSDsluCounter, 3983 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2513 mSDsCounter, 557 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1507 IncrementalHoareTripleChecker+Invalid, 2064 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 557 mSolverCounterUnsat, 1470 mSDtfsCounter, 1507 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 431 GetRequests, 335 SyntacticMatches, 3 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 134 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=842occurred in iteration=10, InterpolantAutomatonStates: 85, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 307 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 48 LocationsWithAnnotation, 1750 PreInvPairs, 1949 NumberOfFragments, 2938 HoareAnnotationTreeSize, 1750 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 48 FomulaSimplificationsInter, 12573 FormulaSimplificationTreeSizeReductionInter, 3.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 870 NumberOfCodeBlocks, 870 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 856 ConstructedInterpolants, 0 QuantifiedInterpolants, 1567 SizeOfPredicates, 5 NumberOfNonLiveVariables, 1007 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 14 InterpolantComputations, 12 PerfectInterpolantSequences, 152/161 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 998]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 574]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || 0 == systemActive)) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 984]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: ((((((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || 0 == systemActive) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 949]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 1008]: Loop Invariant Derived loop invariant: ((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: (((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 1 <= \result) && 1 <= tmp)) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 1 <= \result) && 1 <= tmp)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 750]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 777]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && \result == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && \result == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-07-12 06:18:52,205 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE