./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6c24879c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 909de5fe3a7d5a638d67615e2b4d48b563eefeab07033d1b2a29843c731be596 --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-12 06:18:44,154 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-12 06:18:44,156 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-12 06:18:44,223 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-12 06:18:44,223 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-12 06:18:44,224 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-12 06:18:44,228 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-12 06:18:44,229 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-12 06:18:44,231 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-12 06:18:44,234 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-12 06:18:44,235 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-12 06:18:44,236 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-12 06:18:44,237 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-12 06:18:44,238 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-12 06:18:44,239 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-12 06:18:44,241 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-12 06:18:44,242 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-12 06:18:44,243 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-12 06:18:44,244 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-12 06:18:44,248 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-12 06:18:44,249 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-12 06:18:44,250 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-12 06:18:44,251 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-12 06:18:44,251 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-12 06:18:44,268 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-12 06:18:44,274 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-12 06:18:44,274 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-12 06:18:44,274 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-12 06:18:44,275 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-12 06:18:44,275 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-12 06:18:44,276 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-12 06:18:44,276 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-12 06:18:44,278 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-12 06:18:44,278 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-12 06:18:44,278 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-12 06:18:44,279 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-12 06:18:44,279 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-12 06:18:44,280 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-12 06:18:44,280 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-12 06:18:44,280 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-12 06:18:44,281 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-12 06:18:44,283 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-12 06:18:44,284 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-12 06:18:44,323 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-12 06:18:44,323 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-12 06:18:44,323 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-12 06:18:44,324 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-12 06:18:44,324 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-12 06:18:44,324 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-12 06:18:44,325 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-12 06:18:44,325 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-12 06:18:44,325 INFO L138 SettingsManager]: * Use SBE=true [2022-07-12 06:18:44,326 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-12 06:18:44,326 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-12 06:18:44,326 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-12 06:18:44,326 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-12 06:18:44,327 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-12 06:18:44,327 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-12 06:18:44,327 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-12 06:18:44,327 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-12 06:18:44,327 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-12 06:18:44,327 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-12 06:18:44,327 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-12 06:18:44,328 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-12 06:18:44,328 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-12 06:18:44,328 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-12 06:18:44,328 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-12 06:18:44,328 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:18:44,328 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-12 06:18:44,329 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-12 06:18:44,329 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-12 06:18:44,329 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-12 06:18:44,329 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-12 06:18:44,329 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-12 06:18:44,329 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-12 06:18:44,330 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-12 06:18:44,343 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 909de5fe3a7d5a638d67615e2b4d48b563eefeab07033d1b2a29843c731be596 [2022-07-12 06:18:44,718 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-12 06:18:44,732 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-12 06:18:44,739 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-12 06:18:44,756 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-12 06:18:44,757 INFO L275 PluginConnector]: CDTParser initialized [2022-07-12 06:18:44,758 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c [2022-07-12 06:18:44,825 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9d2d53a6b/bb508e2847db47f6b1eca7a39219e5e1/FLAG6ed01a9cb [2022-07-12 06:18:45,531 INFO L306 CDTParser]: Found 1 translation units. [2022-07-12 06:18:45,532 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c [2022-07-12 06:18:45,544 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9d2d53a6b/bb508e2847db47f6b1eca7a39219e5e1/FLAG6ed01a9cb [2022-07-12 06:18:45,781 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9d2d53a6b/bb508e2847db47f6b1eca7a39219e5e1 [2022-07-12 06:18:45,784 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-12 06:18:45,785 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-12 06:18:45,786 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-12 06:18:45,786 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-12 06:18:45,805 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-12 06:18:45,806 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:18:45" (1/1) ... [2022-07-12 06:18:45,807 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@694150de and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:45, skipping insertion in model container [2022-07-12 06:18:45,807 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 06:18:45" (1/1) ... [2022-07-12 06:18:45,811 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-12 06:18:45,868 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 06:18:46,335 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c[19040,19053] [2022-07-12 06:18:46,337 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:18:46,361 INFO L203 MainTranslator]: Completed pre-run [2022-07-12 06:18:46,449 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c[19040,19053] [2022-07-12 06:18:46,463 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 06:18:46,482 INFO L208 MainTranslator]: Completed translation [2022-07-12 06:18:46,483 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:46 WrapperNode [2022-07-12 06:18:46,483 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-12 06:18:46,498 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-12 06:18:46,498 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-12 06:18:46,499 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-12 06:18:46,504 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:46" (1/1) ... [2022-07-12 06:18:46,554 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:46" (1/1) ... [2022-07-12 06:18:46,602 INFO L137 Inliner]: procedures = 57, calls = 157, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 276 [2022-07-12 06:18:46,603 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-12 06:18:46,603 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-12 06:18:46,604 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-12 06:18:46,604 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-12 06:18:46,614 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:46" (1/1) ... [2022-07-12 06:18:46,614 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:46" (1/1) ... [2022-07-12 06:18:46,631 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:46" (1/1) ... [2022-07-12 06:18:46,636 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:46" (1/1) ... [2022-07-12 06:18:46,640 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:46" (1/1) ... [2022-07-12 06:18:46,654 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:46" (1/1) ... [2022-07-12 06:18:46,660 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:46" (1/1) ... [2022-07-12 06:18:46,662 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-12 06:18:46,676 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-12 06:18:46,676 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-12 06:18:46,676 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-12 06:18:46,677 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:46" (1/1) ... [2022-07-12 06:18:46,683 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 06:18:46,711 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:18:46,729 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-12 06:18:46,779 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-12 06:18:46,810 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-12 06:18:46,810 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-12 06:18:46,810 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-12 06:18:46,810 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-12 06:18:46,810 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-12 06:18:46,810 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-12 06:18:46,810 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-12 06:18:46,811 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-12 06:18:46,811 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-12 06:18:46,811 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:18:46,811 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:18:46,811 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-12 06:18:46,811 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-12 06:18:46,811 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-12 06:18:46,811 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-12 06:18:46,811 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-12 06:18:46,812 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-12 06:18:46,812 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-12 06:18:46,909 INFO L234 CfgBuilder]: Building ICFG [2022-07-12 06:18:46,914 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-12 06:18:47,381 INFO L275 CfgBuilder]: Performing block encoding [2022-07-12 06:18:47,386 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-12 06:18:47,387 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-12 06:18:47,388 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:18:47 BoogieIcfgContainer [2022-07-12 06:18:47,388 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-12 06:18:47,390 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-12 06:18:47,390 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-12 06:18:47,392 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-12 06:18:47,393 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.07 06:18:45" (1/3) ... [2022-07-12 06:18:47,412 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@14ddaa94 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:18:47, skipping insertion in model container [2022-07-12 06:18:47,412 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 06:18:46" (2/3) ... [2022-07-12 06:18:47,412 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@14ddaa94 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 06:18:47, skipping insertion in model container [2022-07-12 06:18:47,412 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:18:47" (3/3) ... [2022-07-12 06:18:47,414 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product57.cil.c [2022-07-12 06:18:47,424 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-12 06:18:47,425 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-12 06:18:47,553 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-12 06:18:47,561 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@9a0cb89, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@39384838 [2022-07-12 06:18:47,561 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-12 06:18:47,578 INFO L276 IsEmpty]: Start isEmpty. Operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 80 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-07-12 06:18:47,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-12 06:18:47,602 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:47,603 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:47,603 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:47,610 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:47,610 INFO L85 PathProgramCache]: Analyzing trace with hash 1702094398, now seen corresponding path program 1 times [2022-07-12 06:18:47,623 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:47,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [588820220] [2022-07-12 06:18:47,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:47,625 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:47,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-12 06:18:47,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:47,981 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:47,985 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:47,986 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [588820220] [2022-07-12 06:18:47,987 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [588820220] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:47,988 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:47,988 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-12 06:18:47,990 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [544853722] [2022-07-12 06:18:47,991 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:48,004 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-12 06:18:48,004 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:48,053 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-12 06:18:48,054 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:18:48,057 INFO L87 Difference]: Start difference. First operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 80 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:48,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:48,136 INFO L93 Difference]: Finished difference Result 177 states and 242 transitions. [2022-07-12 06:18:48,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-12 06:18:48,145 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-12 06:18:48,145 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:48,152 INFO L225 Difference]: With dead ends: 177 [2022-07-12 06:18:48,152 INFO L226 Difference]: Without dead ends: 84 [2022-07-12 06:18:48,156 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-12 06:18:48,158 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 118 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:48,159 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:48,170 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-07-12 06:18:48,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2022-07-12 06:18:48,195 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 65 states have (on average 1.323076923076923) internal successors, (86), 72 states have internal predecessors, (86), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-12 06:18:48,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 109 transitions. [2022-07-12 06:18:48,197 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 109 transitions. Word has length 25 [2022-07-12 06:18:48,197 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:48,197 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 109 transitions. [2022-07-12 06:18:48,198 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:48,198 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 109 transitions. [2022-07-12 06:18:48,215 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-12 06:18:48,216 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:48,216 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:48,216 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-12 06:18:48,216 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:48,217 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:48,217 INFO L85 PathProgramCache]: Analyzing trace with hash 2038444326, now seen corresponding path program 1 times [2022-07-12 06:18:48,217 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:48,217 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1019522517] [2022-07-12 06:18:48,217 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:48,217 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:48,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:48,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-12 06:18:48,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:48,311 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:48,311 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:48,311 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1019522517] [2022-07-12 06:18:48,311 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1019522517] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:48,311 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:48,311 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-12 06:18:48,311 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1963959244] [2022-07-12 06:18:48,312 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:48,312 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 06:18:48,312 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:48,313 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 06:18:48,313 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:18:48,313 INFO L87 Difference]: Start difference. First operand 84 states and 109 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:48,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:48,323 INFO L93 Difference]: Finished difference Result 133 states and 173 transitions. [2022-07-12 06:18:48,333 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 06:18:48,333 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-12 06:18:48,333 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:48,334 INFO L225 Difference]: With dead ends: 133 [2022-07-12 06:18:48,334 INFO L226 Difference]: Without dead ends: 75 [2022-07-12 06:18:48,335 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 06:18:48,336 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 12 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:48,336 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 176 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:48,345 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-07-12 06:18:48,350 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-07-12 06:18:48,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3389830508474576) internal successors, (79), 66 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-07-12 06:18:48,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 97 transitions. [2022-07-12 06:18:48,351 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 97 transitions. Word has length 26 [2022-07-12 06:18:48,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:48,352 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 97 transitions. [2022-07-12 06:18:48,352 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:48,352 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 97 transitions. [2022-07-12 06:18:48,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-07-12 06:18:48,352 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:48,353 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:48,353 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-12 06:18:48,353 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:48,353 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:48,353 INFO L85 PathProgramCache]: Analyzing trace with hash -1677666248, now seen corresponding path program 1 times [2022-07-12 06:18:48,353 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:48,353 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [227902929] [2022-07-12 06:18:48,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:48,354 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:48,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:48,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:48,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:48,448 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:48,448 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:48,448 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [227902929] [2022-07-12 06:18:48,449 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [227902929] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:48,449 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:48,449 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:18:48,449 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [774798256] [2022-07-12 06:18:48,449 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:48,450 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:18:48,450 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:48,450 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:18:48,450 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:18:48,451 INFO L87 Difference]: Start difference. First operand 75 states and 97 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:48,558 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:48,558 INFO L93 Difference]: Finished difference Result 142 states and 187 transitions. [2022-07-12 06:18:48,558 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 06:18:48,559 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-07-12 06:18:48,559 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:48,560 INFO L225 Difference]: With dead ends: 142 [2022-07-12 06:18:48,560 INFO L226 Difference]: Without dead ends: 75 [2022-07-12 06:18:48,560 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-12 06:18:48,561 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 125 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:48,562 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 206 Invalid, 51 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:18:48,562 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-07-12 06:18:48,597 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-07-12 06:18:48,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-07-12 06:18:48,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 96 transitions. [2022-07-12 06:18:48,598 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 96 transitions. Word has length 30 [2022-07-12 06:18:48,598 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:48,599 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 96 transitions. [2022-07-12 06:18:48,603 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-12 06:18:48,603 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2022-07-12 06:18:48,604 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-07-12 06:18:48,604 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:48,604 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:48,605 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-12 06:18:48,605 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:48,605 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:48,605 INFO L85 PathProgramCache]: Analyzing trace with hash -1006789740, now seen corresponding path program 1 times [2022-07-12 06:18:48,606 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:48,606 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [5961617] [2022-07-12 06:18:48,606 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:48,606 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:48,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:48,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:48,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:48,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:48,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:48,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-12 06:18:48,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:48,747 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:48,748 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:48,748 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [5961617] [2022-07-12 06:18:48,748 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [5961617] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:48,748 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:48,748 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 06:18:48,749 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1926054644] [2022-07-12 06:18:48,749 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:48,750 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 06:18:48,750 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:48,751 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 06:18:48,752 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 06:18:48,752 INFO L87 Difference]: Start difference. First operand 75 states and 96 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-12 06:18:48,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:48,988 INFO L93 Difference]: Finished difference Result 217 states and 279 transitions. [2022-07-12 06:18:48,989 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:18:48,989 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 40 [2022-07-12 06:18:48,989 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:48,994 INFO L225 Difference]: With dead ends: 217 [2022-07-12 06:18:48,994 INFO L226 Difference]: Without dead ends: 150 [2022-07-12 06:18:48,996 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-07-12 06:18:49,004 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 179 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 181 SdHoareTripleChecker+Valid, 303 SdHoareTripleChecker+Invalid, 140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:49,020 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [181 Valid, 303 Invalid, 140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:49,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2022-07-12 06:18:49,039 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 144. [2022-07-12 06:18:49,043 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 112 states have (on average 1.2857142857142858) internal successors, (144), 120 states have internal predecessors, (144), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-07-12 06:18:49,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 179 transitions. [2022-07-12 06:18:49,044 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 179 transitions. Word has length 40 [2022-07-12 06:18:49,045 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:49,045 INFO L495 AbstractCegarLoop]: Abstraction has 144 states and 179 transitions. [2022-07-12 06:18:49,059 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-12 06:18:49,060 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 179 transitions. [2022-07-12 06:18:49,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-07-12 06:18:49,064 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:49,064 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:49,065 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-12 06:18:49,065 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:49,065 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:49,065 INFO L85 PathProgramCache]: Analyzing trace with hash -251696612, now seen corresponding path program 1 times [2022-07-12 06:18:49,066 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:49,066 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1864468666] [2022-07-12 06:18:49,066 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:49,066 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:49,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:49,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:49,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:49,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:49,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:49,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-12 06:18:49,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:49,223 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:49,224 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:49,224 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1864468666] [2022-07-12 06:18:49,224 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1864468666] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:49,225 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:49,225 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 06:18:49,226 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1839922097] [2022-07-12 06:18:49,226 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:49,229 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:18:49,229 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:49,230 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:18:49,230 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:49,230 INFO L87 Difference]: Start difference. First operand 144 states and 179 transitions. Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-12 06:18:49,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:49,530 INFO L93 Difference]: Finished difference Result 416 states and 525 transitions. [2022-07-12 06:18:49,531 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-12 06:18:49,531 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-07-12 06:18:49,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:49,536 INFO L225 Difference]: With dead ends: 416 [2022-07-12 06:18:49,536 INFO L226 Difference]: Without dead ends: 280 [2022-07-12 06:18:49,537 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-07-12 06:18:49,541 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 154 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 439 SdHoareTripleChecker+Invalid, 237 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:49,541 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [161 Valid, 439 Invalid, 237 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:49,543 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 280 states. [2022-07-12 06:18:49,614 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 280 to 266. [2022-07-12 06:18:49,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 203 states have (on average 1.2463054187192117) internal successors, (253), 218 states have internal predecessors, (253), 30 states have call successors, (30), 26 states have call predecessors, (30), 32 states have return successors, (42), 32 states have call predecessors, (42), 30 states have call successors, (42) [2022-07-12 06:18:49,617 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 325 transitions. [2022-07-12 06:18:49,617 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 325 transitions. Word has length 46 [2022-07-12 06:18:49,618 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:49,619 INFO L495 AbstractCegarLoop]: Abstraction has 266 states and 325 transitions. [2022-07-12 06:18:49,619 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-12 06:18:49,619 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 325 transitions. [2022-07-12 06:18:49,621 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-07-12 06:18:49,621 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:49,621 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:49,621 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-12 06:18:49,621 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:49,622 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:49,622 INFO L85 PathProgramCache]: Analyzing trace with hash 285200024, now seen corresponding path program 1 times [2022-07-12 06:18:49,622 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:49,622 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1574696233] [2022-07-12 06:18:49,622 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:49,623 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:49,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:49,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-12 06:18:49,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:49,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:18:49,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:49,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:49,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:49,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-12 06:18:49,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:49,772 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:49,773 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:49,773 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1574696233] [2022-07-12 06:18:49,773 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1574696233] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:49,773 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:49,773 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 06:18:49,773 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [877051786] [2022-07-12 06:18:49,774 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:49,774 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:18:49,775 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:49,775 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:18:49,775 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:49,775 INFO L87 Difference]: Start difference. First operand 266 states and 325 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-12 06:18:50,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:50,231 INFO L93 Difference]: Finished difference Result 536 states and 656 transitions. [2022-07-12 06:18:50,231 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-07-12 06:18:50,232 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 50 [2022-07-12 06:18:50,232 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:50,234 INFO L225 Difference]: With dead ends: 536 [2022-07-12 06:18:50,235 INFO L226 Difference]: Without dead ends: 278 [2022-07-12 06:18:50,236 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2022-07-12 06:18:50,237 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 176 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 376 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 178 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 432 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 376 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:50,237 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [178 Valid, 212 Invalid, 432 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 376 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-12 06:18:50,248 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2022-07-12 06:18:50,272 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 264. [2022-07-12 06:18:50,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 201 states have (on average 1.228855721393035) internal successors, (247), 216 states have internal predecessors, (247), 30 states have call successors, (30), 26 states have call predecessors, (30), 32 states have return successors, (42), 32 states have call predecessors, (42), 30 states have call successors, (42) [2022-07-12 06:18:50,275 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 319 transitions. [2022-07-12 06:18:50,275 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 319 transitions. Word has length 50 [2022-07-12 06:18:50,276 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:50,276 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 319 transitions. [2022-07-12 06:18:50,276 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-12 06:18:50,276 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 319 transitions. [2022-07-12 06:18:50,284 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-12 06:18:50,285 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:50,285 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:50,285 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-12 06:18:50,285 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:50,286 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:50,286 INFO L85 PathProgramCache]: Analyzing trace with hash 1652612629, now seen corresponding path program 1 times [2022-07-12 06:18:50,286 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:50,286 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [791309042] [2022-07-12 06:18:50,286 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:50,286 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:50,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:50,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-12 06:18:50,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:50,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:18:50,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:50,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:50,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:50,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-12 06:18:50,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:50,427 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:18:50,427 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:50,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [791309042] [2022-07-12 06:18:50,428 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [791309042] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:50,428 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:50,428 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-12 06:18:50,428 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [81132147] [2022-07-12 06:18:50,428 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:50,430 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:18:50,430 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:50,430 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:18:50,430 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:50,431 INFO L87 Difference]: Start difference. First operand 264 states and 319 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:18:50,766 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:50,766 INFO L93 Difference]: Finished difference Result 538 states and 663 transitions. [2022-07-12 06:18:50,767 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-12 06:18:50,767 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-07-12 06:18:50,767 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:50,769 INFO L225 Difference]: With dead ends: 538 [2022-07-12 06:18:50,769 INFO L226 Difference]: Without dead ends: 282 [2022-07-12 06:18:50,769 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-12 06:18:50,770 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 129 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 307 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 201 SdHoareTripleChecker+Invalid, 353 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 307 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:50,773 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 201 Invalid, 353 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 307 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:50,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2022-07-12 06:18:50,800 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 270. [2022-07-12 06:18:50,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 270 states, 207 states have (on average 1.2222222222222223) internal successors, (253), 222 states have internal predecessors, (253), 30 states have call successors, (30), 26 states have call predecessors, (30), 32 states have return successors, (42), 32 states have call predecessors, (42), 30 states have call successors, (42) [2022-07-12 06:18:50,803 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 270 states to 270 states and 325 transitions. [2022-07-12 06:18:50,803 INFO L78 Accepts]: Start accepts. Automaton has 270 states and 325 transitions. Word has length 56 [2022-07-12 06:18:50,804 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:50,804 INFO L495 AbstractCegarLoop]: Abstraction has 270 states and 325 transitions. [2022-07-12 06:18:50,805 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:18:50,805 INFO L276 IsEmpty]: Start isEmpty. Operand 270 states and 325 transitions. [2022-07-12 06:18:50,806 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-12 06:18:50,806 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:50,807 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:50,807 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-12 06:18:50,807 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:50,807 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:50,808 INFO L85 PathProgramCache]: Analyzing trace with hash -719126633, now seen corresponding path program 1 times [2022-07-12 06:18:50,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:50,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [243182005] [2022-07-12 06:18:50,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:50,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:50,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:50,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-12 06:18:50,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:50,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:18:50,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:50,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:50,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:50,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-12 06:18:50,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:50,912 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:18:50,913 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:50,913 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [243182005] [2022-07-12 06:18:50,927 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [243182005] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:50,927 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:50,928 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:18:50,928 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1150178427] [2022-07-12 06:18:50,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:50,931 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:18:50,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:50,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:18:50,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:18:50,932 INFO L87 Difference]: Start difference. First operand 270 states and 325 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:18:51,169 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:51,180 INFO L93 Difference]: Finished difference Result 550 states and 675 transitions. [2022-07-12 06:18:51,180 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:18:51,181 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-07-12 06:18:51,181 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:51,183 INFO L225 Difference]: With dead ends: 550 [2022-07-12 06:18:51,183 INFO L226 Difference]: Without dead ends: 288 [2022-07-12 06:18:51,184 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-07-12 06:18:51,184 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 130 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 226 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 179 SdHoareTripleChecker+Invalid, 265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 226 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:51,184 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [131 Valid, 179 Invalid, 265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 226 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 06:18:51,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 288 states. [2022-07-12 06:18:51,224 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 288 to 274. [2022-07-12 06:18:51,225 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 274 states, 211 states have (on average 1.2180094786729858) internal successors, (257), 226 states have internal predecessors, (257), 30 states have call successors, (30), 26 states have call predecessors, (30), 32 states have return successors, (42), 32 states have call predecessors, (42), 30 states have call successors, (42) [2022-07-12 06:18:51,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 329 transitions. [2022-07-12 06:18:51,227 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 329 transitions. Word has length 56 [2022-07-12 06:18:51,227 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:51,227 INFO L495 AbstractCegarLoop]: Abstraction has 274 states and 329 transitions. [2022-07-12 06:18:51,227 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-12 06:18:51,227 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 329 transitions. [2022-07-12 06:18:51,228 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-12 06:18:51,228 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:51,228 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:51,228 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-12 06:18:51,229 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:51,229 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:51,229 INFO L85 PathProgramCache]: Analyzing trace with hash 667076761, now seen corresponding path program 1 times [2022-07-12 06:18:51,229 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:51,229 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1514785069] [2022-07-12 06:18:51,229 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:51,230 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:51,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:51,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-12 06:18:51,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:51,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-12 06:18:51,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:51,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:51,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:51,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-12 06:18:51,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:51,368 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:18:51,368 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:51,369 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1514785069] [2022-07-12 06:18:51,369 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1514785069] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:51,369 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:51,369 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-12 06:18:51,369 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [942037171] [2022-07-12 06:18:51,369 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:51,370 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-12 06:18:51,370 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:51,370 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-12 06:18:51,370 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-12 06:18:51,371 INFO L87 Difference]: Start difference. First operand 274 states and 329 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-12 06:18:51,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:51,788 INFO L93 Difference]: Finished difference Result 762 states and 965 transitions. [2022-07-12 06:18:51,788 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-12 06:18:51,789 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2022-07-12 06:18:51,790 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:51,801 INFO L225 Difference]: With dead ends: 762 [2022-07-12 06:18:51,801 INFO L226 Difference]: Without dead ends: 496 [2022-07-12 06:18:51,802 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-12 06:18:51,804 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 285 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 273 mSolverCounterSat, 115 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 287 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 388 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 115 IncrementalHoareTripleChecker+Valid, 273 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:51,804 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [287 Valid, 233 Invalid, 388 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [115 Valid, 273 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-12 06:18:51,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 496 states. [2022-07-12 06:18:51,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 496 to 494. [2022-07-12 06:18:51,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 494 states, 375 states have (on average 1.2053333333333334) internal successors, (452), 398 states have internal predecessors, (452), 60 states have call successors, (60), 56 states have call predecessors, (60), 58 states have return successors, (95), 60 states have call predecessors, (95), 60 states have call successors, (95) [2022-07-12 06:18:51,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 494 states to 494 states and 607 transitions. [2022-07-12 06:18:51,872 INFO L78 Accepts]: Start accepts. Automaton has 494 states and 607 transitions. Word has length 56 [2022-07-12 06:18:51,872 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:51,873 INFO L495 AbstractCegarLoop]: Abstraction has 494 states and 607 transitions. [2022-07-12 06:18:51,873 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-12 06:18:51,873 INFO L276 IsEmpty]: Start isEmpty. Operand 494 states and 607 transitions. [2022-07-12 06:18:51,874 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-12 06:18:51,874 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:51,874 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:51,875 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-12 06:18:51,875 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:51,875 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:51,875 INFO L85 PathProgramCache]: Analyzing trace with hash -295766221, now seen corresponding path program 1 times [2022-07-12 06:18:51,875 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:51,876 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2032396792] [2022-07-12 06:18:51,876 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:51,876 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:51,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:51,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:18:51,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:51,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-12 06:18:51,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:51,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-12 06:18:51,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:52,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-12 06:18:52,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,059 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-12 06:18:52,059 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:52,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2032396792] [2022-07-12 06:18:52,060 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2032396792] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:18:52,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1271331147] [2022-07-12 06:18:52,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:52,060 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:18:52,060 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:18:52,080 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:18:52,081 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-12 06:18:52,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,208 INFO L263 TraceCheckSpWp]: Trace formula consists of 384 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-12 06:18:52,228 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:18:52,442 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 06:18:52,443 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 06:18:52,443 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1271331147] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:52,443 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-12 06:18:52,443 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2022-07-12 06:18:52,444 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2007056483] [2022-07-12 06:18:52,444 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:52,444 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-12 06:18:52,444 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:52,445 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-12 06:18:52,445 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=264, Unknown=0, NotChecked=0, Total=306 [2022-07-12 06:18:52,445 INFO L87 Difference]: Start difference. First operand 494 states and 607 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-12 06:18:52,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:52,591 INFO L93 Difference]: Finished difference Result 958 states and 1182 transitions. [2022-07-12 06:18:52,592 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-12 06:18:52,592 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2022-07-12 06:18:52,593 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:52,594 INFO L225 Difference]: With dead ends: 958 [2022-07-12 06:18:52,594 INFO L226 Difference]: Without dead ends: 472 [2022-07-12 06:18:52,596 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-07-12 06:18:52,596 INFO L413 NwaCegarLoop]: 169 mSDtfsCounter, 67 mSDsluCounter, 576 mSDsCounter, 0 mSdLazyCounter, 114 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 745 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 114 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:52,597 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 745 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-12 06:18:52,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 472 states. [2022-07-12 06:18:52,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 472 to 470. [2022-07-12 06:18:52,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 470 states, 356 states have (on average 1.1882022471910112) internal successors, (423), 378 states have internal predecessors, (423), 58 states have call successors, (58), 54 states have call predecessors, (58), 55 states have return successors, (82), 57 states have call predecessors, (82), 58 states have call successors, (82) [2022-07-12 06:18:52,644 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 470 states to 470 states and 563 transitions. [2022-07-12 06:18:52,645 INFO L78 Accepts]: Start accepts. Automaton has 470 states and 563 transitions. Word has length 60 [2022-07-12 06:18:52,645 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:52,645 INFO L495 AbstractCegarLoop]: Abstraction has 470 states and 563 transitions. [2022-07-12 06:18:52,645 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-12 06:18:52,645 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states and 563 transitions. [2022-07-12 06:18:52,646 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-07-12 06:18:52,647 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:52,647 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:52,707 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-12 06:18:52,865 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-12 06:18:52,865 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:52,866 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:52,866 INFO L85 PathProgramCache]: Analyzing trace with hash -738171045, now seen corresponding path program 1 times [2022-07-12 06:18:52,866 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:52,866 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1862086896] [2022-07-12 06:18:52,866 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:52,866 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:52,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:18:52,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:52,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 06:18:52,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:52,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-12 06:18:52,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-07-12 06:18:52,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-07-12 06:18:52,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:52,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-07-12 06:18:52,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:52,951 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-07-12 06:18:52,951 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:52,951 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1862086896] [2022-07-12 06:18:52,951 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1862086896] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:18:52,951 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1359128733] [2022-07-12 06:18:52,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:52,951 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:18:52,952 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:18:52,953 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:18:52,954 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-12 06:18:53,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,125 INFO L263 TraceCheckSpWp]: Trace formula consists of 481 conjuncts, 7 conjunts are in the unsatisfiable core [2022-07-12 06:18:53,129 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:18:53,341 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:18:53,341 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 06:18:53,341 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1359128733] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:53,341 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-12 06:18:53,355 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-07-12 06:18:53,355 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [780376682] [2022-07-12 06:18:53,356 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:53,356 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 06:18:53,356 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:53,357 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 06:18:53,357 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:53,357 INFO L87 Difference]: Start difference. First operand 470 states and 563 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-12 06:18:53,402 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:53,402 INFO L93 Difference]: Finished difference Result 714 states and 867 transitions. [2022-07-12 06:18:53,402 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 06:18:53,415 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-07-12 06:18:53,416 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:53,419 INFO L225 Difference]: With dead ends: 714 [2022-07-12 06:18:53,419 INFO L226 Difference]: Without dead ends: 712 [2022-07-12 06:18:53,419 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-12 06:18:53,420 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 45 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:53,420 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 188 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 06:18:53,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 712 states. [2022-07-12 06:18:53,466 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 712 to 526. [2022-07-12 06:18:53,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 526 states, 400 states have (on average 1.205) internal successors, (482), 423 states have internal predecessors, (482), 64 states have call successors, (64), 60 states have call predecessors, (64), 61 states have return successors, (98), 63 states have call predecessors, (98), 64 states have call successors, (98) [2022-07-12 06:18:53,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 526 states to 526 states and 644 transitions. [2022-07-12 06:18:53,469 INFO L78 Accepts]: Start accepts. Automaton has 526 states and 644 transitions. Word has length 98 [2022-07-12 06:18:53,470 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:53,470 INFO L495 AbstractCegarLoop]: Abstraction has 526 states and 644 transitions. [2022-07-12 06:18:53,470 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-12 06:18:53,470 INFO L276 IsEmpty]: Start isEmpty. Operand 526 states and 644 transitions. [2022-07-12 06:18:53,475 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2022-07-12 06:18:53,476 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:53,476 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:53,526 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-12 06:18:53,688 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-12 06:18:53,688 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:53,689 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:53,689 INFO L85 PathProgramCache]: Analyzing trace with hash -784141340, now seen corresponding path program 1 times [2022-07-12 06:18:53,689 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:53,689 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [169991449] [2022-07-12 06:18:53,689 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:53,689 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:53,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:18:53,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:53,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 06:18:53,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:53,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-12 06:18:53,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-07-12 06:18:53,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-12 06:18:53,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-12 06:18:53,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:53,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:53,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-07-12 06:18:53,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:53,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2022-07-12 06:18:53,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:53,973 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 56 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-07-12 06:18:53,973 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:53,973 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [169991449] [2022-07-12 06:18:53,974 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [169991449] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 06:18:53,974 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1313003654] [2022-07-12 06:18:53,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:53,974 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:18:53,974 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 06:18:53,979 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 06:18:54,015 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-12 06:18:54,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:54,105 INFO L263 TraceCheckSpWp]: Trace formula consists of 588 conjuncts, 11 conjunts are in the unsatisfiable core [2022-07-12 06:18:54,117 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 06:18:54,331 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 79 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-12 06:18:54,332 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-12 06:18:54,609 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 57 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-07-12 06:18:54,609 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1313003654] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-12 06:18:54,609 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-12 06:18:54,609 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 20 [2022-07-12 06:18:54,617 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1434516358] [2022-07-12 06:18:54,617 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-12 06:18:54,618 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-07-12 06:18:54,618 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:54,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-07-12 06:18:54,619 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=305, Unknown=0, NotChecked=0, Total=380 [2022-07-12 06:18:54,619 INFO L87 Difference]: Start difference. First operand 526 states and 644 transitions. Second operand has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-07-12 06:18:56,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:56,664 INFO L93 Difference]: Finished difference Result 1823 states and 2672 transitions. [2022-07-12 06:18:56,664 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-07-12 06:18:56,665 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 139 [2022-07-12 06:18:56,665 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:56,676 INFO L225 Difference]: With dead ends: 1823 [2022-07-12 06:18:56,684 INFO L226 Difference]: Without dead ends: 1395 [2022-07-12 06:18:56,696 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 352 GetRequests, 300 SyntacticMatches, 5 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 526 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=593, Invalid=1759, Unknown=0, NotChecked=0, Total=2352 [2022-07-12 06:18:56,707 INFO L413 NwaCegarLoop]: 242 mSDtfsCounter, 1050 mSDsluCounter, 712 mSDsCounter, 0 mSdLazyCounter, 1943 mSolverCounterSat, 540 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1061 SdHoareTripleChecker+Valid, 954 SdHoareTripleChecker+Invalid, 2483 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 540 IncrementalHoareTripleChecker+Valid, 1943 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:56,708 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1061 Valid, 954 Invalid, 2483 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [540 Valid, 1943 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-07-12 06:18:56,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1395 states. [2022-07-12 06:18:56,913 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1395 to 952. [2022-07-12 06:18:56,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 952 states, 727 states have (on average 1.18707015130674) internal successors, (863), 768 states have internal predecessors, (863), 114 states have call successors, (114), 100 states have call predecessors, (114), 110 states have return successors, (180), 108 states have call predecessors, (180), 114 states have call successors, (180) [2022-07-12 06:18:56,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 952 states to 952 states and 1157 transitions. [2022-07-12 06:18:56,952 INFO L78 Accepts]: Start accepts. Automaton has 952 states and 1157 transitions. Word has length 139 [2022-07-12 06:18:56,953 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:56,953 INFO L495 AbstractCegarLoop]: Abstraction has 952 states and 1157 transitions. [2022-07-12 06:18:56,953 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-07-12 06:18:56,953 INFO L276 IsEmpty]: Start isEmpty. Operand 952 states and 1157 transitions. [2022-07-12 06:18:56,962 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2022-07-12 06:18:56,962 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 06:18:56,963 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:18:57,002 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-12 06:18:57,179 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 06:18:57,180 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 06:18:57,180 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 06:18:57,180 INFO L85 PathProgramCache]: Analyzing trace with hash -979242294, now seen corresponding path program 1 times [2022-07-12 06:18:57,180 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 06:18:57,180 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [657437172] [2022-07-12 06:18:57,180 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 06:18:57,180 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 06:18:57,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-12 06:18:57,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:57,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-12 06:18:57,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 06:18:57,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-12 06:18:57,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-07-12 06:18:57,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-12 06:18:57,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-12 06:18:57,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:57,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 06:18:57,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2022-07-12 06:18:57,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2022-07-12 06:18:57,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 06:18:57,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2022-07-12 06:18:57,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 06:18:57,349 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 45 proven. 0 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2022-07-12 06:18:57,349 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 06:18:57,349 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [657437172] [2022-07-12 06:18:57,349 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [657437172] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 06:18:57,349 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 06:18:57,350 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-07-12 06:18:57,351 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1341307579] [2022-07-12 06:18:57,351 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 06:18:57,353 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-07-12 06:18:57,353 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 06:18:57,354 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-07-12 06:18:57,354 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2022-07-12 06:18:57,354 INFO L87 Difference]: Start difference. First operand 952 states and 1157 transitions. Second operand has 9 states, 9 states have (on average 9.777777777777779) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (11), 6 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-07-12 06:18:57,796 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 06:18:57,803 INFO L93 Difference]: Finished difference Result 1315 states and 1576 transitions. [2022-07-12 06:18:57,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-12 06:18:57,804 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.777777777777779) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (11), 6 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 143 [2022-07-12 06:18:57,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 06:18:57,805 INFO L225 Difference]: With dead ends: 1315 [2022-07-12 06:18:57,805 INFO L226 Difference]: Without dead ends: 0 [2022-07-12 06:18:57,808 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=72, Invalid=200, Unknown=0, NotChecked=0, Total=272 [2022-07-12 06:18:57,809 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 171 mSDsluCounter, 151 mSDsCounter, 0 mSdLazyCounter, 418 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 471 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 418 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-12 06:18:57,809 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [172 Valid, 237 Invalid, 471 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 418 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-12 06:18:57,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-12 06:18:57,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-12 06:18:57,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-12 06:18:57,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-12 06:18:57,810 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 143 [2022-07-12 06:18:57,811 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 06:18:57,811 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-12 06:18:57,811 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.777777777777779) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (11), 6 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2022-07-12 06:18:57,811 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-12 06:18:57,811 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-12 06:18:57,813 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-12 06:18:57,825 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-07-12 06:18:57,827 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-12 06:19:03,281 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 370 376) no Hoare annotation was computed. [2022-07-12 06:19:03,282 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 370 376) the Hoare annotation is: true [2022-07-12 06:19:03,282 INFO L899 garLoopResultBuilder]: For program point L126-1(lines 122 133) no Hoare annotation was computed. [2022-07-12 06:19:03,282 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 122 133) the Hoare annotation is: (let ((.cse4 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse3) (or .cse4 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3))) [2022-07-12 06:19:03,282 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 122 133) no Hoare annotation was computed. [2022-07-12 06:19:03,282 INFO L899 garLoopResultBuilder]: For program point L547-2(lines 547 551) no Hoare annotation was computed. [2022-07-12 06:19:03,282 INFO L899 garLoopResultBuilder]: For program point L993(line 993) no Hoare annotation was computed. [2022-07-12 06:19:03,282 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 346 369) no Hoare annotation was computed. [2022-07-12 06:19:03,282 INFO L899 garLoopResultBuilder]: For program point L102(lines 102 106) no Hoare annotation was computed. [2022-07-12 06:19:03,282 INFO L895 garLoopResultBuilder]: At program point L102-2(lines 98 109) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse2 .cse4 (and .cse5 .cse0 .cse6) .cse7) (or (and .cse5 (= ~methAndRunningLastTime~0 0) .cse6) .cse1 .cse2 .cse3 .cse7))) [2022-07-12 06:19:03,282 INFO L895 garLoopResultBuilder]: At program point L994(lines 989 996) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse2 .cse4 .cse5) (or .cse1 .cse2 .cse3 .cse5))) [2022-07-12 06:19:03,282 INFO L899 garLoopResultBuilder]: For program point L350-1(lines 349 368) no Hoare annotation was computed. [2022-07-12 06:19:03,283 INFO L895 garLoopResultBuilder]: At program point L317(line 317) the Hoare annotation is: (let ((.cse16 (= ~methaneLevelCritical~0 0)) (.cse17 (= 1 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse18 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse12 (and .cse3 .cse18 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse13 (and .cse16 (<= 2 ~waterLevel~0) .cse17 .cse18)) (.cse1 (not .cse17)) (.cse14 (not .cse16)) (.cse2 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse5 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse6 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse7 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse8 (let ((.cse15 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse15) (and (not .cse15) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse10) (or .cse11 .cse0 .cse1 .cse9 .cse12) (or .cse13 .cse11 .cse0 .cse1 .cse14 .cse12) (or .cse13 .cse1 .cse14 (and .cse2 .cse11 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse10)))) [2022-07-12 06:19:03,283 INFO L899 garLoopResultBuilder]: For program point L412(lines 412 420) no Hoare annotation was computed. [2022-07-12 06:19:03,283 INFO L899 garLoopResultBuilder]: For program point L317-1(line 317) no Hoare annotation was computed. [2022-07-12 06:19:03,283 INFO L899 garLoopResultBuilder]: For program point L408(lines 408 425) no Hoare annotation was computed. [2022-07-12 06:19:03,283 INFO L895 garLoopResultBuilder]: At program point L553(lines 538 556) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse7 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse8 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse9 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse10 (let ((.cse12 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse12) (and (not .cse12) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or (and .cse5 .cse6 .cse0 .cse7 .cse8 .cse9 .cse10) .cse2 .cse4 .cse11) (or (and .cse5 .cse6 (= ~methAndRunningLastTime~0 0) .cse7 .cse8 .cse9 .cse10) .cse1 .cse2 .cse3 .cse11))) [2022-07-12 06:19:03,283 INFO L895 garLoopResultBuilder]: At program point L194(lines 189 197) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse1 .cse2 .cse3 (and .cse5 .cse6 (= ~methAndRunningLastTime~0 0) .cse7) .cse8) (or .cse2 .cse4 (and .cse5 .cse6 .cse0 .cse7) .cse8))) [2022-07-12 06:19:03,283 INFO L895 garLoopResultBuilder]: At program point L479(lines 474 482) the Hoare annotation is: (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 .cse3 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse5) (or .cse6 .cse0 .cse1 .cse7) (or .cse6 .cse0 .cse1 .cse4 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (or .cse1 .cse7 .cse5))) [2022-07-12 06:19:03,283 INFO L899 garLoopResultBuilder]: For program point L323(lines 323 333) no Hoare annotation was computed. [2022-07-12 06:19:03,283 INFO L895 garLoopResultBuilder]: At program point L418(line 418) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse2 .cse4 .cse5) (or .cse1 .cse2 .cse3 .cse5))) [2022-07-12 06:19:03,283 INFO L899 garLoopResultBuilder]: For program point L319(lines 319 336) no Hoare annotation was computed. [2022-07-12 06:19:03,283 INFO L895 garLoopResultBuilder]: At program point L319-1(lines 311 339) the Hoare annotation is: (let ((.cse5 (= ~methAndRunningLastTime~0 0)) (.cse18 (= 1 ~systemActive~0)) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse20 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (not .cse20)) (.cse12 (and .cse5 .cse20 (<= 2 ~waterLevel~0) .cse18 .cse15 .cse11)) (.cse2 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse6 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse7 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse8 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse9 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse10 (let ((.cse19 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse19) (and (not .cse19) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse13 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse14 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse18)) (.cse16 (not (<= 1 ~methaneLevelCritical~0))) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse12 .cse13) (or .cse3 .cse14 .cse0 (and .cse4 .cse5 .cse15 .cse11) .cse1 .cse12) (or .cse14 (and .cse2 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse0 .cse16 (and .cse17 .cse4 .cse18) .cse13) (or .cse3 .cse14 .cse0 .cse16 (and .cse17 .cse4 .cse5 .cse18 .cse15))))) [2022-07-12 06:19:03,283 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 346 369) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8 .cse9)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (and (= ~pumpRunning~0 0) .cse8 .cse9))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse3 .cse5 .cse4) (or .cse6 .cse0 .cse1 .cse2 .cse7) (or .cse6 .cse0 .cse1 .cse5 .cse7)))) [2022-07-12 06:19:03,283 INFO L895 garLoopResultBuilder]: At program point L460(lines 455 462) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse8 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse9 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse10 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse11 (let ((.cse13 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse13) (and (not .cse13) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 (and .cse5 .cse0 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse12) (or .cse0 .cse1 .cse2 .cse4) (or .cse1 .cse2 (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse3 .cse12))) [2022-07-12 06:19:03,284 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 346 369) no Hoare annotation was computed. [2022-07-12 06:19:03,284 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 993) no Hoare annotation was computed. [2022-07-12 06:19:03,284 INFO L895 garLoopResultBuilder]: At program point L423(line 423) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (and .cse6 .cse9 .cse10)) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse3 (and .cse5 .cse6) .cse7) (or .cse0 .cse1 .cse2 .cse8 .cse4) (or .cse2 .cse8 (and .cse5 .cse6 .cse9 .cse10) .cse7)))) [2022-07-12 06:19:03,284 INFO L895 garLoopResultBuilder]: At program point L423-1(lines 404 428) the Hoare annotation is: (let ((.cse16 (= ~methaneLevelCritical~0 0)) (.cse17 (= 1 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse18 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse12 (and .cse3 .cse18 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse13 (and .cse16 (<= 2 ~waterLevel~0) .cse17 .cse18)) (.cse1 (not .cse17)) (.cse14 (not .cse16)) (.cse2 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse5 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse6 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse7 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse8 (let ((.cse15 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse15) (and (not .cse15) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse10) (or .cse11 .cse0 .cse1 .cse9 .cse12) (or .cse13 .cse11 .cse0 .cse1 .cse14 .cse12) (or .cse13 .cse1 .cse14 (and .cse2 .cse11 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse10)))) [2022-07-12 06:19:03,284 INFO L899 garLoopResultBuilder]: For program point L357-1(lines 357 363) no Hoare annotation was computed. [2022-07-12 06:19:03,284 INFO L899 garLoopResultBuilder]: For program point L324(lines 324 330) no Hoare annotation was computed. [2022-07-12 06:19:03,284 INFO L899 garLoopResultBuilder]: For program point L547(lines 547 551) no Hoare annotation was computed. [2022-07-12 06:19:03,284 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 201 230) no Hoare annotation was computed. [2022-07-12 06:19:03,284 INFO L899 garLoopResultBuilder]: For program point L222(line 222) no Hoare annotation was computed. [2022-07-12 06:19:03,284 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 201 230) the Hoare annotation is: true [2022-07-12 06:19:03,284 INFO L899 garLoopResultBuilder]: For program point L215(lines 215 219) no Hoare annotation was computed. [2022-07-12 06:19:03,284 INFO L902 garLoopResultBuilder]: At program point L215-1(lines 215 219) the Hoare annotation is: true [2022-07-12 06:19:03,284 INFO L899 garLoopResultBuilder]: For program point L212(line 212) no Hoare annotation was computed. [2022-07-12 06:19:03,284 INFO L902 garLoopResultBuilder]: At program point L211-2(lines 211 225) the Hoare annotation is: true [2022-07-12 06:19:03,284 INFO L902 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: true [2022-07-12 06:19:03,284 INFO L899 garLoopResultBuilder]: For program point L207-1(line 207) no Hoare annotation was computed. [2022-07-12 06:19:03,285 INFO L902 garLoopResultBuilder]: At program point L226(lines 201 230) the Hoare annotation is: true [2022-07-12 06:19:03,285 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 134 142) the Hoare annotation is: true [2022-07-12 06:19:03,285 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 134 142) no Hoare annotation was computed. [2022-07-12 06:19:03,285 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 134 142) no Hoare annotation was computed. [2022-07-12 06:19:03,285 INFO L895 garLoopResultBuilder]: At program point L308(lines 303 310) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-12 06:19:03,285 INFO L895 garLoopResultBuilder]: At program point L614(lines 567 615) the Hoare annotation is: false [2022-07-12 06:19:03,285 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-12 06:19:03,285 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-12 06:19:03,285 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-12 06:19:03,285 INFO L899 garLoopResultBuilder]: For program point L569(lines 568 613) no Hoare annotation was computed. [2022-07-12 06:19:03,285 INFO L899 garLoopResultBuilder]: For program point L598(lines 598 609) no Hoare annotation was computed. [2022-07-12 06:19:03,285 INFO L895 garLoopResultBuilder]: At program point L590(line 590) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse6 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4 .cse5))) [2022-07-12 06:19:03,285 INFO L895 garLoopResultBuilder]: At program point L260(lines 256 262) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-12 06:19:03,285 INFO L895 garLoopResultBuilder]: At program point L611(lines 568 613) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse6 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4 .cse5))) [2022-07-12 06:19:03,285 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 584) no Hoare annotation was computed. [2022-07-12 06:19:03,285 INFO L899 garLoopResultBuilder]: For program point L578-1(lines 578 584) no Hoare annotation was computed. [2022-07-12 06:19:03,285 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-12 06:19:03,285 INFO L899 garLoopResultBuilder]: For program point L570(lines 570 574) no Hoare annotation was computed. [2022-07-12 06:19:03,286 INFO L895 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-12 06:19:03,286 INFO L902 garLoopResultBuilder]: At program point L273(lines 265 275) the Hoare annotation is: true [2022-07-12 06:19:03,286 INFO L895 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-12 06:19:03,286 INFO L899 garLoopResultBuilder]: For program point L286(lines 286 293) no Hoare annotation was computed. [2022-07-12 06:19:03,286 INFO L899 garLoopResultBuilder]: For program point L604(lines 604 608) no Hoare annotation was computed. [2022-07-12 06:19:03,286 INFO L899 garLoopResultBuilder]: For program point L286-2(lines 286 293) no Hoare annotation was computed. [2022-07-12 06:19:03,298 INFO L895 garLoopResultBuilder]: At program point L604-2(lines 598 609) the Hoare annotation is: (let ((.cse3 (<= 1 ~methaneLevelCritical~0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse6 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse8 .cse4 .cse5 .cse6) (and .cse0 .cse2 .cse3 .cse8 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse7 .cse4 .cse5 .cse6))) [2022-07-12 06:19:03,299 INFO L899 garLoopResultBuilder]: For program point L588(lines 588 594) no Hoare annotation was computed. [2022-07-12 06:19:03,299 INFO L899 garLoopResultBuilder]: For program point L588-1(lines 588 594) no Hoare annotation was computed. [2022-07-12 06:19:03,299 INFO L902 garLoopResultBuilder]: At program point L617(lines 558 621) the Hoare annotation is: true [2022-07-12 06:19:03,299 INFO L902 garLoopResultBuilder]: At program point L295(lines 276 298) the Hoare annotation is: true [2022-07-12 06:19:03,299 INFO L895 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-12 06:19:03,299 INFO L895 garLoopResultBuilder]: At program point L580(line 580) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse6 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4 .cse5))) [2022-07-12 06:19:03,299 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 378 402) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~waterLevel~0 0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse4 .cse5 .cse1 .cse3) (or .cse4 .cse5 .cse1 .cse6) (or .cse0 .cse1 .cse2 .cse6))) [2022-07-12 06:19:03,300 INFO L899 garLoopResultBuilder]: For program point L382(lines 382 399) no Hoare annotation was computed. [2022-07-12 06:19:03,300 INFO L895 garLoopResultBuilder]: At program point L184(lines 175 188) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (not .cse2)) (.cse6 (and .cse8 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (<= 2 ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~waterLevel~0 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5) .cse6 .cse7) (or .cse4 .cse0 .cse6 .cse3 (and .cse8 .cse5)) (or .cse0 .cse1 .cse7 .cse2 (not (= ~methAndRunningLastTime~0 0)))))) [2022-07-12 06:19:03,300 INFO L895 garLoopResultBuilder]: At program point L434(lines 429 436) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~waterLevel~0 0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse3 .cse0 (<= 2 ~waterLevel~0) .cse4) (or .cse3 .cse0 .cse2) (or .cse0 .cse1 .cse4))) [2022-07-12 06:19:03,300 INFO L895 garLoopResultBuilder]: At program point L397(line 397) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~waterLevel~0 0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse4 .cse1 .cse3) (or .cse4 .cse1 .cse5) (or .cse0 .cse1 .cse2 .cse5))) [2022-07-12 06:19:03,300 INFO L899 garLoopResultBuilder]: For program point L397-1(lines 378 402) no Hoare annotation was computed. [2022-07-12 06:19:03,300 INFO L899 garLoopResultBuilder]: For program point L445(lines 445 451) no Hoare annotation was computed. [2022-07-12 06:19:03,300 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 378 402) no Hoare annotation was computed. [2022-07-12 06:19:03,301 INFO L895 garLoopResultBuilder]: At program point L445-2(lines 438 454) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (<= 2 ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~waterLevel~0 0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse3 .cse0 .cse2 (and (= ~pumpRunning~0 0) .cse4 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~4#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|))) (or .cse3 .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse5))) [2022-07-12 06:19:03,301 INFO L895 garLoopResultBuilder]: At program point L534(lines 519 537) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not (= ~waterLevel~0 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not .cse2)) (.cse0 (not (= 1 ~systemActive~0))) (.cse8 (<= 2 ~waterLevel~0)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (and .cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse5 .cse0 .cse3 .cse6 (and .cse7 .cse8)) (or .cse5 .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8) .cse4 .cse6)))) [2022-07-12 06:19:03,301 INFO L895 garLoopResultBuilder]: At program point L470(lines 463 473) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~waterLevel~0 0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|))) (or .cse1 .cse5 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse6 (and .cse3 .cse4)) (or .cse1 .cse5 .cse6))) [2022-07-12 06:19:03,301 INFO L895 garLoopResultBuilder]: At program point L468(line 468) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (<= 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~waterLevel~0 0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse3) (or .cse1 .cse4 .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse5 (and (= ~pumpRunning~0 0) .cse2)) (or .cse1 .cse4 .cse5))) [2022-07-12 06:19:03,301 INFO L899 garLoopResultBuilder]: For program point L179(lines 179 185) no Hoare annotation was computed. [2022-07-12 06:19:03,301 INFO L899 garLoopResultBuilder]: For program point L468-1(line 468) no Hoare annotation was computed. [2022-07-12 06:19:03,301 INFO L899 garLoopResultBuilder]: For program point L528(lines 528 532) no Hoare annotation was computed. [2022-07-12 06:19:03,301 INFO L899 garLoopResultBuilder]: For program point L528-2(lines 528 532) no Hoare annotation was computed. [2022-07-12 06:19:03,302 INFO L895 garLoopResultBuilder]: At program point L392(line 392) the Hoare annotation is: (let ((.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse6)) (.cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~waterLevel~0 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse1 .cse5 .cse6 .cse2) (or .cse1 .cse5 .cse4 .cse6 (not (= ~methAndRunningLastTime~0 0)))))) [2022-07-12 06:19:03,302 INFO L899 garLoopResultBuilder]: For program point L386(lines 386 394) no Hoare annotation was computed. [2022-07-12 06:19:03,302 INFO L899 garLoopResultBuilder]: For program point L114-1(lines 110 121) no Hoare annotation was computed. [2022-07-12 06:19:03,302 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 110 121) no Hoare annotation was computed. [2022-07-12 06:19:03,302 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 110 121) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3) (or .cse1 .cse4 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse4 .cse2 .cse3))) [2022-07-12 06:19:03,304 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 06:19:03,306 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-12 06:19:03,376 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.07 06:19:03 BoogieIcfgContainer [2022-07-12 06:19:03,381 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-12 06:19:03,381 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-12 06:19:03,382 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-12 06:19:03,383 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-12 06:19:03,383 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 06:18:47" (3/4) ... [2022-07-12 06:19:03,385 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-12 06:19:03,389 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-12 06:19:03,403 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-12 06:19:03,404 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-12 06:19:03,404 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-12 06:19:03,404 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-12 06:19:03,405 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-12 06:19:03,405 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-12 06:19:03,415 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-07-12 06:19:03,416 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-12 06:19:03,416 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-12 06:19:03,417 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-12 06:19:03,417 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-12 06:19:03,417 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:19:03,417 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-12 06:19:03,448 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-12 06:19:03,449 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-12 06:19:03,449 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-12 06:19:03,449 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) || ((((((tmp == systemActive && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0)) || ((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) [2022-07-12 06:19:03,450 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-07-12 06:19:03,451 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && (((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel))) [2022-07-12 06:19:03,452 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) && tmp == 0)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) [2022-07-12 06:19:03,452 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) && (((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) [2022-07-12 06:19:03,452 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && tmp == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) [2022-07-12 06:19:03,452 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && !(\old(pumpRunning) == 0)) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) [2022-07-12 06:19:03,453 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp) && methaneLevelCritical <= \result))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) [2022-07-12 06:19:03,453 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || \old(pumpRunning) == 0) || !(methAndRunningLastTime == 0)) [2022-07-12 06:19:03,453 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) [2022-07-12 06:19:03,456 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((((((pumpRunning == \old(pumpRunning) && \result == 0) && !(\old(pumpRunning) == 0)) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-07-12 06:19:03,456 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-07-12 06:19:03,456 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || \old(pumpRunning) == 0) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) [2022-07-12 06:19:03,456 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-07-12 06:19:03,506 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-12 06:19:03,506 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-12 06:19:03,507 INFO L158 Benchmark]: Toolchain (without parser) took 17721.73ms. Allocated memory was 90.2MB in the beginning and 192.9MB in the end (delta: 102.8MB). Free memory was 67.2MB in the beginning and 118.1MB in the end (delta: -50.9MB). Peak memory consumption was 50.2MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,507 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 90.2MB. Free memory was 65.6MB in the beginning and 65.5MB in the end (delta: 42.9kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 06:19:03,508 INFO L158 Benchmark]: CACSL2BoogieTranslator took 697.17ms. Allocated memory is still 90.2MB. Free memory was 67.0MB in the beginning and 55.6MB in the end (delta: 11.3MB). Peak memory consumption was 11.0MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,508 INFO L158 Benchmark]: Boogie Procedure Inliner took 104.61ms. Allocated memory is still 90.2MB. Free memory was 55.6MB in the beginning and 52.7MB in the end (delta: 3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,508 INFO L158 Benchmark]: Boogie Preprocessor took 69.34ms. Allocated memory is still 90.2MB. Free memory was 52.7MB in the beginning and 51.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,508 INFO L158 Benchmark]: RCFGBuilder took 712.96ms. Allocated memory is still 90.2MB. Free memory was 51.1MB in the beginning and 34.1MB in the end (delta: 17.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,508 INFO L158 Benchmark]: TraceAbstraction took 15991.05ms. Allocated memory was 90.2MB in the beginning and 192.9MB in the end (delta: 102.8MB). Free memory was 33.7MB in the beginning and 123.3MB in the end (delta: -89.7MB). Peak memory consumption was 85.6MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,509 INFO L158 Benchmark]: Witness Printer took 125.38ms. Allocated memory is still 192.9MB. Free memory was 123.3MB in the beginning and 118.1MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-12 06:19:03,510 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 90.2MB. Free memory was 65.6MB in the beginning and 65.5MB in the end (delta: 42.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 697.17ms. Allocated memory is still 90.2MB. Free memory was 67.0MB in the beginning and 55.6MB in the end (delta: 11.3MB). Peak memory consumption was 11.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 104.61ms. Allocated memory is still 90.2MB. Free memory was 55.6MB in the beginning and 52.7MB in the end (delta: 3.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 69.34ms. Allocated memory is still 90.2MB. Free memory was 52.7MB in the beginning and 51.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 712.96ms. Allocated memory is still 90.2MB. Free memory was 51.1MB in the beginning and 34.1MB in the end (delta: 17.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 15991.05ms. Allocated memory was 90.2MB in the beginning and 192.9MB in the end (delta: 102.8MB). Free memory was 33.7MB in the beginning and 123.3MB in the end (delta: -89.7MB). Peak memory consumption was 85.6MB. Max. memory is 16.1GB. * Witness Printer took 125.38ms. Allocated memory is still 192.9MB. Free memory was 123.3MB in the beginning and 118.1MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 993]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 93 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 15.8s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2555 SdHoareTripleChecker+Valid, 3.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2523 mSDsluCounter, 4191 SdHoareTripleChecker+Invalid, 2.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2638 mSDsCounter, 956 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3988 IncrementalHoareTripleChecker+Invalid, 4944 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 956 mSolverCounterUnsat, 1553 mSDtfsCounter, 3988 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 738 GetRequests, 580 SyntacticMatches, 6 SemanticMatches, 152 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 647 ImplicationChecksByTransitivity, 1.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=952occurred in iteration=12, InterpolantAutomatonStates: 132, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 13 MinimizatonAttempts, 693 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 1746 PreInvPairs, 1937 NumberOfFragments, 2732 HoareAnnotationTreeSize, 1746 FomulaSimplifications, 104 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 43 FomulaSimplificationsInter, 14662 FormulaSimplificationTreeSizeReductionInter, 4.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 2.4s InterpolantComputationTime, 1122 NumberOfCodeBlocks, 1122 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1244 ConstructedInterpolants, 0 QuantifiedInterpolants, 2477 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1453 ConjunctsInSsa, 26 ConjunctsInUnsatCore, 17 InterpolantComputations, 12 PerfectInterpolantSequences, 428/471 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && !(\old(pumpRunning) == 0)) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 311]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) && tmp == 0)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((((((pumpRunning == \old(pumpRunning) && \result == 0) && !(\old(pumpRunning) == 0)) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: (((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) || ((((((tmp == systemActive && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0)) || ((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) && (((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 98]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 438]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp) && methaneLevelCritical <= \result))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 989]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 404]: Loop Invariant Derived loop invariant: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && (((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 519]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || \old(pumpRunning) == 0) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || \old(pumpRunning) == 0) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && tmp == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 558]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 256]: Loop Invariant Derived loop invariant: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-07-12 06:19:03,580 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE