./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 791161d1 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 685bdac90b32b89d64927338575dc6f79737e9f84bb9272d4bfb0c942aa4ae35 --- Real Ultimate output --- This is Ultimate 0.2.2-?-791161d [2022-07-22 17:37:52,388 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-22 17:37:52,390 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-22 17:37:52,409 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-22 17:37:52,410 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-22 17:37:52,411 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-22 17:37:52,411 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-22 17:37:52,412 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-22 17:37:52,413 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-22 17:37:52,414 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-22 17:37:52,415 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-22 17:37:52,415 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-22 17:37:52,416 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-22 17:37:52,416 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-22 17:37:52,417 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-22 17:37:52,418 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-22 17:37:52,418 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-22 17:37:52,419 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-22 17:37:52,420 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-22 17:37:52,421 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-22 17:37:52,423 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-22 17:37:52,423 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-22 17:37:52,424 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-22 17:37:52,425 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-22 17:37:52,426 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-22 17:37:52,428 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-22 17:37:52,428 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-22 17:37:52,428 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-22 17:37:52,429 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-22 17:37:52,429 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-22 17:37:52,430 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-22 17:37:52,430 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-22 17:37:52,431 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-22 17:37:52,432 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-22 17:37:52,432 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-22 17:37:52,433 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-22 17:37:52,433 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-22 17:37:52,434 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-22 17:37:52,434 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-22 17:37:52,434 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-22 17:37:52,435 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-22 17:37:52,435 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-22 17:37:52,436 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-22 17:37:52,450 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-22 17:37:52,450 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-22 17:37:52,450 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-22 17:37:52,451 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-22 17:37:52,451 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-22 17:37:52,451 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-22 17:37:52,452 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-22 17:37:52,452 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-22 17:37:52,452 INFO L138 SettingsManager]: * Use SBE=true [2022-07-22 17:37:52,452 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-22 17:37:52,452 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-22 17:37:52,452 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-22 17:37:52,453 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-22 17:37:52,453 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-22 17:37:52,453 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-22 17:37:52,453 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-22 17:37:52,453 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-22 17:37:52,453 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-22 17:37:52,453 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-22 17:37:52,454 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-22 17:37:52,454 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-22 17:37:52,454 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-22 17:37:52,454 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-22 17:37:52,454 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-22 17:37:52,454 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:37:52,454 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-22 17:37:52,455 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-22 17:37:52,455 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-22 17:37:52,455 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-22 17:37:52,455 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-22 17:37:52,455 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-22 17:37:52,455 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-22 17:37:52,455 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-22 17:37:52,456 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 685bdac90b32b89d64927338575dc6f79737e9f84bb9272d4bfb0c942aa4ae35 [2022-07-22 17:37:52,674 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-22 17:37:52,694 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-22 17:37:52,696 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-22 17:37:52,696 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-22 17:37:52,697 INFO L275 PluginConnector]: CDTParser initialized [2022-07-22 17:37:52,698 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c [2022-07-22 17:37:52,738 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/67e8ac662/8c1520c287b24c6e8a9fc66b26f18a03/FLAG3317b969e [2022-07-22 17:37:53,097 INFO L306 CDTParser]: Found 1 translation units. [2022-07-22 17:37:53,097 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c [2022-07-22 17:37:53,108 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/67e8ac662/8c1520c287b24c6e8a9fc66b26f18a03/FLAG3317b969e [2022-07-22 17:37:53,478 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/67e8ac662/8c1520c287b24c6e8a9fc66b26f18a03 [2022-07-22 17:37:53,480 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-22 17:37:53,481 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-22 17:37:53,482 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-22 17:37:53,482 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-22 17:37:53,485 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-22 17:37:53,485 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,486 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@513aca11 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53, skipping insertion in model container [2022-07-22 17:37:53,486 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,490 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-22 17:37:53,512 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-22 17:37:53,783 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c[19412,19425] [2022-07-22 17:37:53,787 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:37:53,796 INFO L203 MainTranslator]: Completed pre-run [2022-07-22 17:37:53,867 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c[19412,19425] [2022-07-22 17:37:53,867 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:37:53,881 INFO L208 MainTranslator]: Completed translation [2022-07-22 17:37:53,881 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53 WrapperNode [2022-07-22 17:37:53,882 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-22 17:37:53,882 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-22 17:37:53,882 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-22 17:37:53,883 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-22 17:37:53,887 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,910 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,942 INFO L137 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 282 [2022-07-22 17:37:53,943 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-22 17:37:53,944 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-22 17:37:53,944 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-22 17:37:53,944 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-22 17:37:53,950 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,950 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,956 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,957 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,961 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,964 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,965 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,967 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-22 17:37:53,967 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-22 17:37:53,967 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-22 17:37:53,967 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-22 17:37:53,968 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (1/1) ... [2022-07-22 17:37:53,975 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:37:53,983 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:37:54,032 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-22 17:37:54,050 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-22 17:37:54,061 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-22 17:37:54,061 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-22 17:37:54,061 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-22 17:37:54,061 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-22 17:37:54,061 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-22 17:37:54,062 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-22 17:37:54,062 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-22 17:37:54,062 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-22 17:37:54,062 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-22 17:37:54,062 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:37:54,062 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:37:54,062 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-22 17:37:54,062 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-22 17:37:54,063 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-07-22 17:37:54,063 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-07-22 17:37:54,063 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-22 17:37:54,063 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-22 17:37:54,063 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-22 17:37:54,063 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-22 17:37:54,063 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-22 17:37:54,064 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-22 17:37:54,064 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-22 17:37:54,132 INFO L234 CfgBuilder]: Building ICFG [2022-07-22 17:37:54,134 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-22 17:37:54,430 INFO L275 CfgBuilder]: Performing block encoding [2022-07-22 17:37:54,436 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-22 17:37:54,436 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-22 17:37:54,438 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:37:54 BoogieIcfgContainer [2022-07-22 17:37:54,438 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-22 17:37:54,439 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-22 17:37:54,439 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-22 17:37:54,442 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-22 17:37:54,442 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.07 05:37:53" (1/3) ... [2022-07-22 17:37:54,443 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a4c7b7b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:37:54, skipping insertion in model container [2022-07-22 17:37:54,443 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:53" (2/3) ... [2022-07-22 17:37:54,443 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a4c7b7b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:37:54, skipping insertion in model container [2022-07-22 17:37:54,443 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:37:54" (3/3) ... [2022-07-22 17:37:54,444 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product55.cil.c [2022-07-22 17:37:54,455 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-22 17:37:54,455 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-22 17:37:54,490 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-22 17:37:54,495 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@68533554, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@644eb608 [2022-07-22 17:37:54,495 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-22 17:37:54,499 INFO L276 IsEmpty]: Start isEmpty. Operand has 106 states, 78 states have (on average 1.3846153846153846) internal successors, (108), 89 states have internal predecessors, (108), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-07-22 17:37:54,506 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-22 17:37:54,506 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:54,506 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:54,507 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:54,510 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:54,511 INFO L85 PathProgramCache]: Analyzing trace with hash -898586634, now seen corresponding path program 1 times [2022-07-22 17:37:54,516 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:54,518 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [423138304] [2022-07-22 17:37:54,518 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:54,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:54,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:54,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-22 17:37:54,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:54,644 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:54,645 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:54,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [423138304] [2022-07-22 17:37:54,645 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [423138304] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:54,646 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:54,657 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-22 17:37:54,658 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2005655435] [2022-07-22 17:37:54,659 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:54,662 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-22 17:37:54,662 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:54,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-22 17:37:54,682 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:37:54,685 INFO L87 Difference]: Start difference. First operand has 106 states, 78 states have (on average 1.3846153846153846) internal successors, (108), 89 states have internal predecessors, (108), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:54,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:54,734 INFO L93 Difference]: Finished difference Result 203 states and 278 transitions. [2022-07-22 17:37:54,734 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-22 17:37:54,735 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-22 17:37:54,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:54,744 INFO L225 Difference]: With dead ends: 203 [2022-07-22 17:37:54,745 INFO L226 Difference]: Without dead ends: 97 [2022-07-22 17:37:54,748 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:37:54,753 INFO L413 NwaCegarLoop]: 136 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 136 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:54,754 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 136 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:54,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-07-22 17:37:54,791 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2022-07-22 17:37:54,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 71 states have (on average 1.323943661971831) internal successors, (94), 81 states have internal predecessors, (94), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-07-22 17:37:54,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 127 transitions. [2022-07-22 17:37:54,799 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 127 transitions. Word has length 25 [2022-07-22 17:37:54,799 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:54,800 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 127 transitions. [2022-07-22 17:37:54,800 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:54,801 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 127 transitions. [2022-07-22 17:37:54,805 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-22 17:37:54,805 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:54,805 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:54,806 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-22 17:37:54,806 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:54,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:54,808 INFO L85 PathProgramCache]: Analyzing trace with hash 1844424780, now seen corresponding path program 1 times [2022-07-22 17:37:54,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:54,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [736586504] [2022-07-22 17:37:54,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:54,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:54,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:54,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-22 17:37:54,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:54,908 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:54,909 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:54,909 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [736586504] [2022-07-22 17:37:54,909 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [736586504] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:54,909 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:54,909 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 17:37:54,910 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1231712697] [2022-07-22 17:37:54,911 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:54,913 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:37:54,913 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:54,914 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:37:54,914 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:37:54,915 INFO L87 Difference]: Start difference. First operand 97 states and 127 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:54,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:54,942 INFO L93 Difference]: Finished difference Result 155 states and 203 transitions. [2022-07-22 17:37:54,942 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:37:54,942 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-22 17:37:54,943 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:54,944 INFO L225 Difference]: With dead ends: 155 [2022-07-22 17:37:54,945 INFO L226 Difference]: Without dead ends: 88 [2022-07-22 17:37:54,946 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:37:54,948 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 16 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:54,949 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 207 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:54,950 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2022-07-22 17:37:54,957 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2022-07-22 17:37:54,959 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 65 states have (on average 1.3384615384615384) internal successors, (87), 75 states have internal predecessors, (87), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-22 17:37:54,960 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 115 transitions. [2022-07-22 17:37:54,960 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 115 transitions. Word has length 26 [2022-07-22 17:37:54,960 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:54,961 INFO L495 AbstractCegarLoop]: Abstraction has 88 states and 115 transitions. [2022-07-22 17:37:54,961 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:54,961 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 115 transitions. [2022-07-22 17:37:54,964 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-07-22 17:37:54,964 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:54,964 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:54,964 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-22 17:37:54,965 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:54,968 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:54,970 INFO L85 PathProgramCache]: Analyzing trace with hash 1100480442, now seen corresponding path program 1 times [2022-07-22 17:37:54,970 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:54,971 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [566082576] [2022-07-22 17:37:54,971 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:54,971 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:54,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:37:55,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,069 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:55,069 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:55,070 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [566082576] [2022-07-22 17:37:55,070 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [566082576] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:55,070 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:55,070 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:37:55,071 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1901631351] [2022-07-22 17:37:55,071 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:55,071 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:37:55,071 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:55,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:37:55,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:37:55,073 INFO L87 Difference]: Start difference. First operand 88 states and 115 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:55,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:55,245 INFO L93 Difference]: Finished difference Result 290 states and 386 transitions. [2022-07-22 17:37:55,245 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-22 17:37:55,246 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-07-22 17:37:55,246 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:55,247 INFO L225 Difference]: With dead ends: 290 [2022-07-22 17:37:55,247 INFO L226 Difference]: Without dead ends: 210 [2022-07-22 17:37:55,248 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-22 17:37:55,249 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 238 mSDsluCounter, 399 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 238 SdHoareTripleChecker+Valid, 540 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:55,249 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [238 Valid, 540 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:37:55,250 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-07-22 17:37:55,264 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 204. [2022-07-22 17:37:55,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 149 states have (on average 1.3691275167785235) internal successors, (204), 171 states have internal predecessors, (204), 33 states have call successors, (33), 21 states have call predecessors, (33), 21 states have return successors, (34), 21 states have call predecessors, (34), 33 states have call successors, (34) [2022-07-22 17:37:55,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 271 transitions. [2022-07-22 17:37:55,266 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 271 transitions. Word has length 30 [2022-07-22 17:37:55,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:55,266 INFO L495 AbstractCegarLoop]: Abstraction has 204 states and 271 transitions. [2022-07-22 17:37:55,266 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:55,266 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 271 transitions. [2022-07-22 17:37:55,267 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-07-22 17:37:55,267 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:55,267 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:55,267 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-22 17:37:55,268 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:55,268 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:55,268 INFO L85 PathProgramCache]: Analyzing trace with hash -1086931004, now seen corresponding path program 1 times [2022-07-22 17:37:55,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:55,268 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1258914925] [2022-07-22 17:37:55,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:55,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:55,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:37:55,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,343 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:55,344 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:55,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1258914925] [2022-07-22 17:37:55,344 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1258914925] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:55,344 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:55,344 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:37:55,344 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [752436928] [2022-07-22 17:37:55,344 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:55,345 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:37:55,355 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:55,355 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:37:55,356 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:37:55,356 INFO L87 Difference]: Start difference. First operand 204 states and 271 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:55,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:55,469 INFO L93 Difference]: Finished difference Result 594 states and 801 transitions. [2022-07-22 17:37:55,470 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-22 17:37:55,470 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-07-22 17:37:55,470 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:55,476 INFO L225 Difference]: With dead ends: 594 [2022-07-22 17:37:55,476 INFO L226 Difference]: Without dead ends: 398 [2022-07-22 17:37:55,477 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-07-22 17:37:55,478 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 83 mSDsluCounter, 443 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 86 SdHoareTripleChecker+Valid, 569 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:55,479 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [86 Valid, 569 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:37:55,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 398 states. [2022-07-22 17:37:55,537 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 398 to 389. [2022-07-22 17:37:55,538 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 389 states, 280 states have (on average 1.35) internal successors, (378), 323 states have internal predecessors, (378), 66 states have call successors, (66), 42 states have call predecessors, (66), 42 states have return successors, (71), 42 states have call predecessors, (71), 66 states have call successors, (71) [2022-07-22 17:37:55,540 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 389 states to 389 states and 515 transitions. [2022-07-22 17:37:55,540 INFO L78 Accepts]: Start accepts. Automaton has 389 states and 515 transitions. Word has length 34 [2022-07-22 17:37:55,541 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:55,541 INFO L495 AbstractCegarLoop]: Abstraction has 389 states and 515 transitions. [2022-07-22 17:37:55,541 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:55,541 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 515 transitions. [2022-07-22 17:37:55,542 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-22 17:37:55,543 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:55,543 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:55,543 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-22 17:37:55,543 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:55,544 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:55,544 INFO L85 PathProgramCache]: Analyzing trace with hash -2070630656, now seen corresponding path program 1 times [2022-07-22 17:37:55,544 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:55,544 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1753999640] [2022-07-22 17:37:55,544 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:55,544 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:55,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:37:55,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-22 17:37:55,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,626 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:55,639 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:55,639 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1753999640] [2022-07-22 17:37:55,640 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1753999640] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:55,640 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:55,640 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:37:55,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [666647284] [2022-07-22 17:37:55,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:55,641 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:37:55,641 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:55,641 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:37:55,641 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:37:55,641 INFO L87 Difference]: Start difference. First operand 389 states and 515 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-22 17:37:55,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:55,922 INFO L93 Difference]: Finished difference Result 948 states and 1289 transitions. [2022-07-22 17:37:55,922 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-22 17:37:55,923 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-07-22 17:37:55,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:55,925 INFO L225 Difference]: With dead ends: 948 [2022-07-22 17:37:55,925 INFO L226 Difference]: Without dead ends: 567 [2022-07-22 17:37:55,927 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-22 17:37:55,927 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 126 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 303 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 352 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 303 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:55,928 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 212 Invalid, 352 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 303 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:37:55,929 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 567 states. [2022-07-22 17:37:55,948 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 567 to 548. [2022-07-22 17:37:55,948 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 548 states, 399 states have (on average 1.2857142857142858) internal successors, (513), 436 states have internal predecessors, (513), 80 states have call successors, (80), 68 states have call predecessors, (80), 68 states have return successors, (113), 70 states have call predecessors, (113), 80 states have call successors, (113) [2022-07-22 17:37:55,951 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 548 states to 548 states and 706 transitions. [2022-07-22 17:37:55,951 INFO L78 Accepts]: Start accepts. Automaton has 548 states and 706 transitions. Word has length 38 [2022-07-22 17:37:55,951 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:55,951 INFO L495 AbstractCegarLoop]: Abstraction has 548 states and 706 transitions. [2022-07-22 17:37:55,952 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-22 17:37:55,952 INFO L276 IsEmpty]: Start isEmpty. Operand 548 states and 706 transitions. [2022-07-22 17:37:55,953 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-07-22 17:37:55,953 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:55,953 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:55,953 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-22 17:37:55,953 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:55,954 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:55,954 INFO L85 PathProgramCache]: Analyzing trace with hash 1021483760, now seen corresponding path program 1 times [2022-07-22 17:37:55,954 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:55,954 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [319013077] [2022-07-22 17:37:55,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:55,954 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:55,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:37:55,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:55,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:37:56,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:37:56,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-07-22 17:37:56,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,034 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:56,034 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:56,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [319013077] [2022-07-22 17:37:56,034 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [319013077] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:56,034 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:56,034 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 17:37:56,035 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1125238468] [2022-07-22 17:37:56,035 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:56,035 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-22 17:37:56,035 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:56,035 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 17:37:56,036 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:37:56,036 INFO L87 Difference]: Start difference. First operand 548 states and 706 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:37:56,316 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:56,316 INFO L93 Difference]: Finished difference Result 1212 states and 1581 transitions. [2022-07-22 17:37:56,316 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 17:37:56,317 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2022-07-22 17:37:56,317 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:56,319 INFO L225 Difference]: With dead ends: 1212 [2022-07-22 17:37:56,320 INFO L226 Difference]: Without dead ends: 672 [2022-07-22 17:37:56,321 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-22 17:37:56,322 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 139 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 363 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 231 SdHoareTripleChecker+Invalid, 421 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 363 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:56,322 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [140 Valid, 231 Invalid, 421 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 363 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:37:56,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 672 states. [2022-07-22 17:37:56,350 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 672 to 658. [2022-07-22 17:37:56,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 658 states, 481 states have (on average 1.2536382536382535) internal successors, (603), 518 states have internal predecessors, (603), 88 states have call successors, (88), 68 states have call predecessors, (88), 88 states have return successors, (141), 94 states have call predecessors, (141), 88 states have call successors, (141) [2022-07-22 17:37:56,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 658 states to 658 states and 832 transitions. [2022-07-22 17:37:56,354 INFO L78 Accepts]: Start accepts. Automaton has 658 states and 832 transitions. Word has length 53 [2022-07-22 17:37:56,354 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:56,354 INFO L495 AbstractCegarLoop]: Abstraction has 658 states and 832 transitions. [2022-07-22 17:37:56,355 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:37:56,355 INFO L276 IsEmpty]: Start isEmpty. Operand 658 states and 832 transitions. [2022-07-22 17:37:56,355 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-07-22 17:37:56,355 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:56,356 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:56,356 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-22 17:37:56,356 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:56,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:56,356 INFO L85 PathProgramCache]: Analyzing trace with hash 1444185586, now seen corresponding path program 1 times [2022-07-22 17:37:56,357 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:56,357 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1626232711] [2022-07-22 17:37:56,357 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:56,357 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:56,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:37:56,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:37:56,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:37:56,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-07-22 17:37:56,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,420 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:56,420 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:56,421 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1626232711] [2022-07-22 17:37:56,421 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1626232711] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:56,421 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:56,421 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-22 17:37:56,421 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [660025799] [2022-07-22 17:37:56,421 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:56,422 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-22 17:37:56,422 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:56,422 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-22 17:37:56,422 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-07-22 17:37:56,422 INFO L87 Difference]: Start difference. First operand 658 states and 832 transitions. Second operand has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:37:56,685 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:56,686 INFO L93 Difference]: Finished difference Result 1354 states and 1773 transitions. [2022-07-22 17:37:56,686 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-22 17:37:56,686 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2022-07-22 17:37:56,686 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:56,689 INFO L225 Difference]: With dead ends: 1354 [2022-07-22 17:37:56,689 INFO L226 Difference]: Without dead ends: 704 [2022-07-22 17:37:56,691 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=42, Invalid=114, Unknown=0, NotChecked=0, Total=156 [2022-07-22 17:37:56,691 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 195 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 472 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 544 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 472 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:56,692 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [196 Valid, 207 Invalid, 544 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 472 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:37:56,692 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 704 states. [2022-07-22 17:37:56,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 704 to 666. [2022-07-22 17:37:56,730 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 666 states, 489 states have (on average 1.2494887525562373) internal successors, (611), 526 states have internal predecessors, (611), 88 states have call successors, (88), 68 states have call predecessors, (88), 88 states have return successors, (141), 94 states have call predecessors, (141), 88 states have call successors, (141) [2022-07-22 17:37:56,733 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 666 states to 666 states and 840 transitions. [2022-07-22 17:37:56,733 INFO L78 Accepts]: Start accepts. Automaton has 666 states and 840 transitions. Word has length 53 [2022-07-22 17:37:56,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:56,733 INFO L495 AbstractCegarLoop]: Abstraction has 666 states and 840 transitions. [2022-07-22 17:37:56,734 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:37:56,734 INFO L276 IsEmpty]: Start isEmpty. Operand 666 states and 840 transitions. [2022-07-22 17:37:56,734 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-07-22 17:37:56,734 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:56,735 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:56,735 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-22 17:37:56,735 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:56,735 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:56,736 INFO L85 PathProgramCache]: Analyzing trace with hash -361252748, now seen corresponding path program 1 times [2022-07-22 17:37:56,736 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:56,736 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1849290974] [2022-07-22 17:37:56,736 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:56,736 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:56,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:37:56,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:37:56,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:37:56,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-07-22 17:37:56,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:56,785 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:56,785 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:56,785 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1849290974] [2022-07-22 17:37:56,786 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1849290974] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:56,786 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:56,786 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:37:56,786 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1614586706] [2022-07-22 17:37:56,786 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:56,786 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:37:56,787 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:56,787 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:37:56,787 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:37:56,787 INFO L87 Difference]: Start difference. First operand 666 states and 840 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-22 17:37:57,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:57,112 INFO L93 Difference]: Finished difference Result 1970 states and 2593 transitions. [2022-07-22 17:37:57,112 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-22 17:37:57,112 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 53 [2022-07-22 17:37:57,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:57,133 INFO L225 Difference]: With dead ends: 1970 [2022-07-22 17:37:57,133 INFO L226 Difference]: Without dead ends: 1312 [2022-07-22 17:37:57,136 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 12 SyntacticMatches, 2 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-22 17:37:57,137 INFO L413 NwaCegarLoop]: 149 mSDtfsCounter, 347 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 328 mSolverCounterSat, 146 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 268 SdHoareTripleChecker+Invalid, 474 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 146 IncrementalHoareTripleChecker+Valid, 328 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:57,138 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [350 Valid, 268 Invalid, 474 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [146 Valid, 328 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:37:57,140 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1312 states. [2022-07-22 17:37:57,221 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1312 to 1300. [2022-07-22 17:37:57,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1300 states, 957 states have (on average 1.219435736677116) internal successors, (1167), 1018 states have internal predecessors, (1167), 174 states have call successors, (174), 158 states have call predecessors, (174), 168 states have return successors, (305), 174 states have call predecessors, (305), 174 states have call successors, (305) [2022-07-22 17:37:57,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1300 states to 1300 states and 1646 transitions. [2022-07-22 17:37:57,228 INFO L78 Accepts]: Start accepts. Automaton has 1300 states and 1646 transitions. Word has length 53 [2022-07-22 17:37:57,228 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:57,228 INFO L495 AbstractCegarLoop]: Abstraction has 1300 states and 1646 transitions. [2022-07-22 17:37:57,228 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-22 17:37:57,228 INFO L276 IsEmpty]: Start isEmpty. Operand 1300 states and 1646 transitions. [2022-07-22 17:37:57,244 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-07-22 17:37:57,244 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:57,244 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:57,244 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-22 17:37:57,245 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:57,245 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:57,245 INFO L85 PathProgramCache]: Analyzing trace with hash 1451480602, now seen corresponding path program 1 times [2022-07-22 17:37:57,245 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:57,245 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [758215669] [2022-07-22 17:37:57,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:57,245 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:57,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:37:57,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-22 17:37:57,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-22 17:37:57,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:37:57,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-07-22 17:37:57,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,339 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:57,340 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:57,340 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [758215669] [2022-07-22 17:37:57,340 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [758215669] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:57,340 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:57,340 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:37:57,340 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1408419386] [2022-07-22 17:37:57,340 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:57,341 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:37:57,341 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:57,341 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:37:57,342 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:37:57,342 INFO L87 Difference]: Start difference. First operand 1300 states and 1646 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-22 17:37:57,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:57,714 INFO L93 Difference]: Finished difference Result 2414 states and 3206 transitions. [2022-07-22 17:37:57,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-22 17:37:57,715 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 57 [2022-07-22 17:37:57,716 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:57,726 INFO L225 Difference]: With dead ends: 2414 [2022-07-22 17:37:57,726 INFO L226 Difference]: Without dead ends: 2412 [2022-07-22 17:37:57,728 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-07-22 17:37:57,730 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 479 mSDsluCounter, 91 mSDsCounter, 0 mSdLazyCounter, 303 mSolverCounterSat, 254 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 481 SdHoareTripleChecker+Valid, 197 SdHoareTripleChecker+Invalid, 557 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 254 IncrementalHoareTripleChecker+Valid, 303 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:57,730 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [481 Valid, 197 Invalid, 557 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [254 Valid, 303 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-22 17:37:57,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2412 states. [2022-07-22 17:37:57,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2412 to 1891. [2022-07-22 17:37:57,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1891 states, 1386 states have (on average 1.22005772005772) internal successors, (1691), 1494 states have internal predecessors, (1691), 263 states have call successors, (263), 197 states have call predecessors, (263), 241 states have return successors, (549), 260 states have call predecessors, (549), 263 states have call successors, (549) [2022-07-22 17:37:57,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1891 states to 1891 states and 2503 transitions. [2022-07-22 17:37:57,830 INFO L78 Accepts]: Start accepts. Automaton has 1891 states and 2503 transitions. Word has length 57 [2022-07-22 17:37:57,830 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:57,830 INFO L495 AbstractCegarLoop]: Abstraction has 1891 states and 2503 transitions. [2022-07-22 17:37:57,830 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-22 17:37:57,830 INFO L276 IsEmpty]: Start isEmpty. Operand 1891 states and 2503 transitions. [2022-07-22 17:37:57,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-07-22 17:37:57,834 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:57,835 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:57,835 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-22 17:37:57,835 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:57,835 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:57,835 INFO L85 PathProgramCache]: Analyzing trace with hash 1457514374, now seen corresponding path program 1 times [2022-07-22 17:37:57,836 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:57,836 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [842231203] [2022-07-22 17:37:57,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:57,836 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:57,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:37:57,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-22 17:37:57,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:37:57,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:37:57,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:37:57,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-22 17:37:57,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-07-22 17:37:57,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:37:57,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-07-22 17:37:57,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:57,991 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-07-22 17:37:57,992 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:57,992 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [842231203] [2022-07-22 17:37:57,992 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [842231203] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:37:57,992 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1097558501] [2022-07-22 17:37:57,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:57,993 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:37:57,993 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:37:58,016 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:37:58,048 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-22 17:37:58,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,108 INFO L263 TraceCheckSpWp]: Trace formula consists of 486 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-22 17:37:58,113 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:37:58,166 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:58,166 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 17:37:58,167 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1097558501] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:58,167 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-22 17:37:58,167 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 10 [2022-07-22 17:37:58,167 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1544750623] [2022-07-22 17:37:58,167 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:58,168 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:37:58,168 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:58,168 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:37:58,168 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-07-22 17:37:58,168 INFO L87 Difference]: Start difference. First operand 1891 states and 2503 transitions. Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-22 17:37:58,231 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:58,231 INFO L93 Difference]: Finished difference Result 3333 states and 4492 transitions. [2022-07-22 17:37:58,231 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:37:58,231 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 100 [2022-07-22 17:37:58,232 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:58,238 INFO L225 Difference]: With dead ends: 3333 [2022-07-22 17:37:58,238 INFO L226 Difference]: Without dead ends: 1726 [2022-07-22 17:37:58,243 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-07-22 17:37:58,243 INFO L413 NwaCegarLoop]: 157 mSDtfsCounter, 53 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 230 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:58,244 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 230 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:58,245 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1726 states. [2022-07-22 17:37:58,313 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1726 to 1726. [2022-07-22 17:37:58,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1726 states, 1263 states have (on average 1.1916072842438639) internal successors, (1505), 1361 states have internal predecessors, (1505), 240 states have call successors, (240), 190 states have call predecessors, (240), 222 states have return successors, (384), 233 states have call predecessors, (384), 240 states have call successors, (384) [2022-07-22 17:37:58,322 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1726 states to 1726 states and 2129 transitions. [2022-07-22 17:37:58,322 INFO L78 Accepts]: Start accepts. Automaton has 1726 states and 2129 transitions. Word has length 100 [2022-07-22 17:37:58,323 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:58,323 INFO L495 AbstractCegarLoop]: Abstraction has 1726 states and 2129 transitions. [2022-07-22 17:37:58,323 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-22 17:37:58,323 INFO L276 IsEmpty]: Start isEmpty. Operand 1726 states and 2129 transitions. [2022-07-22 17:37:58,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-07-22 17:37:58,326 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:58,326 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:58,361 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-22 17:37:58,534 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-22 17:37:58,534 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:58,535 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:58,535 INFO L85 PathProgramCache]: Analyzing trace with hash 2033027807, now seen corresponding path program 1 times [2022-07-22 17:37:58,535 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:58,535 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [226291030] [2022-07-22 17:37:58,535 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:58,535 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:58,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:37:58,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-22 17:37:58,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:37:58,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:37:58,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:37:58,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-22 17:37:58,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-22 17:37:58,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-07-22 17:37:58,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:37:58,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-07-22 17:37:58,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,632 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 12 proven. 1 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2022-07-22 17:37:58,632 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:58,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [226291030] [2022-07-22 17:37:58,632 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [226291030] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:37:58,633 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1666883090] [2022-07-22 17:37:58,633 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:58,633 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:37:58,633 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:37:58,634 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:37:58,664 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-22 17:37:58,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,758 INFO L263 TraceCheckSpWp]: Trace formula consists of 505 conjuncts, 3 conjunts are in the unsatisfiable core [2022-07-22 17:37:58,764 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:37:58,780 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-22 17:37:58,780 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 17:37:58,781 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1666883090] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:58,781 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-22 17:37:58,781 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-07-22 17:37:58,781 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2005456231] [2022-07-22 17:37:58,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:58,782 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:37:58,782 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:58,782 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:37:58,782 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:37:58,783 INFO L87 Difference]: Start difference. First operand 1726 states and 2129 transitions. Second operand has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-22 17:37:58,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:58,815 INFO L93 Difference]: Finished difference Result 1969 states and 2439 transitions. [2022-07-22 17:37:58,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:37:58,816 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 108 [2022-07-22 17:37:58,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:58,819 INFO L225 Difference]: With dead ends: 1969 [2022-07-22 17:37:58,819 INFO L226 Difference]: Without dead ends: 718 [2022-07-22 17:37:58,822 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:37:58,822 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 38 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 251 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:58,823 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 251 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:58,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 718 states. [2022-07-22 17:37:58,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 718 to 718. [2022-07-22 17:37:58,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 718 states, 525 states have (on average 1.1638095238095238) internal successors, (611), 564 states have internal predecessors, (611), 99 states have call successors, (99), 77 states have call predecessors, (99), 93 states have return successors, (155), 99 states have call predecessors, (155), 99 states have call successors, (155) [2022-07-22 17:37:58,849 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 718 states to 718 states and 865 transitions. [2022-07-22 17:37:58,849 INFO L78 Accepts]: Start accepts. Automaton has 718 states and 865 transitions. Word has length 108 [2022-07-22 17:37:58,850 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:58,850 INFO L495 AbstractCegarLoop]: Abstraction has 718 states and 865 transitions. [2022-07-22 17:37:58,850 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-22 17:37:58,850 INFO L276 IsEmpty]: Start isEmpty. Operand 718 states and 865 transitions. [2022-07-22 17:37:58,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-07-22 17:37:58,851 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:58,851 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:58,871 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-22 17:37:59,069 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-22 17:37:59,069 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:59,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:59,069 INFO L85 PathProgramCache]: Analyzing trace with hash 2017248584, now seen corresponding path program 1 times [2022-07-22 17:37:59,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:59,070 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [125378462] [2022-07-22 17:37:59,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:59,070 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:59,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:37:59,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-22 17:37:59,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:37:59,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:37:59,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:37:59,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-07-22 17:37:59,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-07-22 17:37:59,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-07-22 17:37:59,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-22 17:37:59,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:37:59,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-07-22 17:37:59,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,183 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-22 17:37:59,183 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:59,183 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [125378462] [2022-07-22 17:37:59,183 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [125378462] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:37:59,183 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1056593949] [2022-07-22 17:37:59,184 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:59,184 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:37:59,184 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:37:59,185 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:37:59,199 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-22 17:37:59,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,292 INFO L263 TraceCheckSpWp]: Trace formula consists of 509 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-22 17:37:59,294 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:37:59,433 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-07-22 17:37:59,433 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 17:37:59,433 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1056593949] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:59,433 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-22 17:37:59,433 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2022-07-22 17:37:59,434 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [324953164] [2022-07-22 17:37:59,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:59,434 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-22 17:37:59,434 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:59,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 17:37:59,435 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2022-07-22 17:37:59,435 INFO L87 Difference]: Start difference. First operand 718 states and 865 transitions. Second operand has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-07-22 17:37:59,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:59,579 INFO L93 Difference]: Finished difference Result 1292 states and 1550 transitions. [2022-07-22 17:37:59,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 17:37:59,580 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 110 [2022-07-22 17:37:59,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:59,580 INFO L225 Difference]: With dead ends: 1292 [2022-07-22 17:37:59,581 INFO L226 Difference]: Without dead ends: 0 [2022-07-22 17:37:59,583 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 122 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2022-07-22 17:37:59,583 INFO L413 NwaCegarLoop]: 181 mSDtfsCounter, 45 mSDsluCounter, 766 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 947 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:59,583 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 947 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:37:59,584 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-22 17:37:59,584 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-22 17:37:59,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 17:37:59,584 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-22 17:37:59,584 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2022-07-22 17:37:59,584 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:59,584 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-22 17:37:59,585 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-07-22 17:37:59,585 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-22 17:37:59,585 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-22 17:37:59,587 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-22 17:37:59,618 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-22 17:37:59,804 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:37:59,806 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-22 17:38:04,253 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 394 401) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= 1 ~systemActive~0)) .cse1) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-07-22 17:38:04,254 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 394 401) no Hoare annotation was computed. [2022-07-22 17:38:04,254 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 394 401) no Hoare annotation was computed. [2022-07-22 17:38:04,254 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 301 307) no Hoare annotation was computed. [2022-07-22 17:38:04,254 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 301 307) the Hoare annotation is: true [2022-07-22 17:38:04,254 INFO L899 garLoopResultBuilder]: For program point L126-1(lines 122 133) no Hoare annotation was computed. [2022-07-22 17:38:04,255 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 122 133) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse6 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse6) (or .cse5 .cse2 .cse4 (not (= 0 ~systemActive~0))))) [2022-07-22 17:38:04,255 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 122 133) no Hoare annotation was computed. [2022-07-22 17:38:04,255 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 919 948) no Hoare annotation was computed. [2022-07-22 17:38:04,255 INFO L902 garLoopResultBuilder]: At program point L929-2(lines 929 943) the Hoare annotation is: true [2022-07-22 17:38:04,255 INFO L902 garLoopResultBuilder]: At program point L925(line 925) the Hoare annotation is: true [2022-07-22 17:38:04,255 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 919 948) the Hoare annotation is: true [2022-07-22 17:38:04,255 INFO L899 garLoopResultBuilder]: For program point L925-1(line 925) no Hoare annotation was computed. [2022-07-22 17:38:04,255 INFO L902 garLoopResultBuilder]: At program point L944(lines 919 948) the Hoare annotation is: true [2022-07-22 17:38:04,255 INFO L899 garLoopResultBuilder]: For program point L940(line 940) no Hoare annotation was computed. [2022-07-22 17:38:04,256 INFO L899 garLoopResultBuilder]: For program point L933(lines 933 937) no Hoare annotation was computed. [2022-07-22 17:38:04,256 INFO L902 garLoopResultBuilder]: At program point L933-1(lines 933 937) the Hoare annotation is: true [2022-07-22 17:38:04,256 INFO L899 garLoopResultBuilder]: For program point L930(line 930) no Hoare annotation was computed. [2022-07-22 17:38:04,256 INFO L895 garLoopResultBuilder]: At program point L894(line 894) the Hoare annotation is: (let ((.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 0)) (.cse16 (<= 1 ~methaneLevelCritical~0)) (.cse15 (= 1 ~systemActive~0))) (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse10 (and .cse14 .cse16 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse15)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse9 (not .cse16)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (and .cse14 .cse13)) (.cse5 (not .cse15)) (.cse11 (<= 1 ~pumpRunning~0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse6) (or .cse0 .cse7 .cse4) (or .cse5 .cse8 .cse9 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse9) (or .cse1 .cse5 .cse8 .cse9 .cse10) (or .cse0 .cse1 .cse7 .cse5 (and .cse11 .cse2 .cse12 .cse13) .cse9) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse14 .cse5 .cse8 .cse6) (or .cse0 .cse1 .cse7 .cse5 (and .cse11 .cse12 .cse13) .cse6)))) [2022-07-22 17:38:04,256 INFO L899 garLoopResultBuilder]: For program point L894-1(line 894) no Hoare annotation was computed. [2022-07-22 17:38:04,256 INFO L895 garLoopResultBuilder]: At program point L407(line 407) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-07-22 17:38:04,256 INFO L899 garLoopResultBuilder]: For program point L407-1(line 407) no Hoare annotation was computed. [2022-07-22 17:38:04,257 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 277 300) no Hoare annotation was computed. [2022-07-22 17:38:04,257 INFO L899 garLoopResultBuilder]: For program point L102(lines 102 106) no Hoare annotation was computed. [2022-07-22 17:38:04,257 INFO L895 garLoopResultBuilder]: At program point L102-2(lines 98 109) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-07-22 17:38:04,257 INFO L899 garLoopResultBuilder]: For program point L288-1(lines 288 294) no Hoare annotation was computed. [2022-07-22 17:38:04,257 INFO L899 garLoopResultBuilder]: For program point L1019(line 1019) no Hoare annotation was computed. [2022-07-22 17:38:04,257 INFO L895 garLoopResultBuilder]: At program point L375(line 375) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-07-22 17:38:04,257 INFO L895 garLoopResultBuilder]: At program point L371(line 371) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse8 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or (and .cse4 (= ~methAndRunningLastTime~0 0) .cse7 .cse8) .cse1 .cse2 .cse5 .cse3) (or .cse2 .cse5 .cse3 (and .cse4 .cse7 .cse8) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-07-22 17:38:04,258 INFO L899 garLoopResultBuilder]: For program point L900(lines 900 910) no Hoare annotation was computed. [2022-07-22 17:38:04,258 INFO L899 garLoopResultBuilder]: For program point L896(lines 896 913) no Hoare annotation was computed. [2022-07-22 17:38:04,258 INFO L895 garLoopResultBuilder]: At program point L896-1(lines 888 916) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 0)) (.cse14 (= ~methAndRunningLastTime~0 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 0 ~systemActive~0))) (.cse1 (and .cse13 .cse14 .cse12)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (and .cse13 .cse14 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse10 (<= 1 ~pumpRunning~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse2) (or .cse5 .cse6 .cse7 .cse8 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse9 .cse5 .cse1 (and .cse10 .cse11 .cse12) .cse8) (or .cse5 .cse6 .cse3 (and .cse13 .cse14 .cse4) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse14 .cse4)) (or .cse9 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse9 .cse5 (and .cse10 .cse14 .cse11 .cse4 .cse12) .cse3 (and .cse13 .cse14 .cse4 .cse12))))) [2022-07-22 17:38:04,258 INFO L895 garLoopResultBuilder]: At program point L380(line 380) the Hoare annotation is: (let ((.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4) (or .cse1 .cse3 .cse5 .cse6) (or .cse3 .cse5 .cse4) (or .cse3 .cse5 .cse6 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse3 (and .cse7 .cse2 .cse8) .cse6) (or .cse0 .cse1 (and .cse7 .cse8) .cse3 .cse4) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-07-22 17:38:04,258 INFO L895 garLoopResultBuilder]: At program point L1020(lines 1015 1022) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse5) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-07-22 17:38:04,258 INFO L895 garLoopResultBuilder]: At program point L380-1(lines 361 385) the Hoare annotation is: (let ((.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (= ~pumpRunning~0 0)) (.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse13 .cse15 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse14)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse7 (not .cse15)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (and .cse13 .cse12)) (.cse4 (not .cse14)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse4 .cse6 .cse7 .cse8 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse7) (or .cse1 .cse4 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse9 .cse4 (and .cse10 .cse2 .cse11 .cse12) .cse7) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse13 .cse4 .cse6 .cse5) (or .cse0 .cse1 .cse9 .cse4 (and .cse10 .cse11 .cse12) .cse5) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-07-22 17:38:04,258 INFO L895 garLoopResultBuilder]: At program point L409(lines 402 412) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 .cse3 (and .cse4 (= ~methAndRunningLastTime~0 0) .cse7)) (or .cse2 .cse5 .cse3 (and .cse4 .cse7) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-07-22 17:38:04,259 INFO L899 garLoopResultBuilder]: For program point L281-1(lines 280 299) no Hoare annotation was computed. [2022-07-22 17:38:04,259 INFO L899 garLoopResultBuilder]: For program point L901(lines 901 907) no Hoare annotation was computed. [2022-07-22 17:38:04,259 INFO L895 garLoopResultBuilder]: At program point L418(lines 413 421) the Hoare annotation is: (let ((.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= ~pumpRunning~0 0)) (.cse14 (<= 1 ~methaneLevelCritical~0)) (.cse13 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse15 (= 1 ~systemActive~0))) (let ((.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (and .cse12 .cse14 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse13 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse15)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not .cse15)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse8 (not .cse14)) (.cse10 (and .cse12 .cse13 .cse11))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7) (or .cse1 .cse5 .cse6 .cse8 .cse9) (or .cse0 .cse7 .cse4) (or .cse0 .cse1 .cse5 .cse7) (or .cse0 .cse10 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse8) (or .cse5 .cse6 .cse8 .cse9 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse5 (and (<= 1 ~pumpRunning~0) .cse2 (<= 2 ~waterLevel~0) .cse11) .cse8 .cse10)))) [2022-07-22 17:38:04,259 INFO L899 garLoopResultBuilder]: For program point L369(lines 369 377) no Hoare annotation was computed. [2022-07-22 17:38:04,259 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 277 300) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and .cse12 .cse5)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (and .cse4 .cse2 .cse5)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (and .cse4 .cse5) .cse3) (or .cse6 .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse6 .cse10 .cse8) (or .cse6 .cse7 .cse11 .cse9 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse6 .cse10 .cse11) (or (and .cse12 .cse2 .cse5) .cse1 .cse6 .cse7 .cse11)))) [2022-07-22 17:38:04,259 INFO L899 garLoopResultBuilder]: For program point L365(lines 365 382) no Hoare annotation was computed. [2022-07-22 17:38:04,259 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 277 300) no Hoare annotation was computed. [2022-07-22 17:38:04,260 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1019) no Hoare annotation was computed. [2022-07-22 17:38:04,260 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 134 142) the Hoare annotation is: true [2022-07-22 17:38:04,260 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 134 142) no Hoare annotation was computed. [2022-07-22 17:38:04,260 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 134 142) no Hoare annotation was computed. [2022-07-22 17:38:04,260 INFO L895 garLoopResultBuilder]: At program point L502(line 502) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) .cse1 .cse2) (and .cse0 (= |ULTIMATE.start_valid_product_#res#1| 1) (<= 2 ~waterLevel~0) .cse1 .cse2 (not (= 0 ~systemActive~0))))) [2022-07-22 17:38:04,260 INFO L899 garLoopResultBuilder]: For program point L213(lines 212 259) no Hoare annotation was computed. [2022-07-22 17:38:04,260 INFO L899 garLoopResultBuilder]: For program point L242(lines 242 255) no Hoare annotation was computed. [2022-07-22 17:38:04,260 INFO L902 garLoopResultBuilder]: At program point L1010(lines 991 1013) the Hoare annotation is: true [2022-07-22 17:38:04,261 INFO L895 garLoopResultBuilder]: At program point L977(lines 973 979) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2022-07-22 17:38:04,261 INFO L895 garLoopResultBuilder]: At program point L234(line 234) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 (= 0 ~systemActive~0) .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-07-22 17:38:04,261 INFO L902 garLoopResultBuilder]: At program point L263(lines 202 267) the Hoare annotation is: true [2022-07-22 17:38:04,261 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-22 17:38:04,261 INFO L899 garLoopResultBuilder]: For program point L222(lines 222 228) no Hoare annotation was computed. [2022-07-22 17:38:04,261 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-22 17:38:04,261 INFO L899 garLoopResultBuilder]: For program point L222-1(lines 222 228) no Hoare annotation was computed. [2022-07-22 17:38:04,261 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-22 17:38:04,261 INFO L899 garLoopResultBuilder]: For program point L214(lines 214 218) no Hoare annotation was computed. [2022-07-22 17:38:04,262 INFO L895 garLoopResultBuilder]: At program point L260(lines 211 261) the Hoare annotation is: false [2022-07-22 17:38:04,262 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-22 17:38:04,262 INFO L895 garLoopResultBuilder]: At program point L508(lines 496 510) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2022-07-22 17:38:04,262 INFO L899 garLoopResultBuilder]: For program point L248(lines 248 254) no Hoare annotation was computed. [2022-07-22 17:38:04,262 INFO L895 garLoopResultBuilder]: At program point L248-2(lines 242 255) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 (= 0 ~systemActive~0) .cse5) (and .cse0 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-07-22 17:38:04,262 INFO L899 garLoopResultBuilder]: For program point L500(lines 500 506) no Hoare annotation was computed. [2022-07-22 17:38:04,262 INFO L895 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-22 17:38:04,262 INFO L899 garLoopResultBuilder]: For program point L500-1(lines 500 506) no Hoare annotation was computed. [2022-07-22 17:38:04,263 INFO L895 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-22 17:38:04,263 INFO L899 garLoopResultBuilder]: For program point L232(lines 232 238) no Hoare annotation was computed. [2022-07-22 17:38:04,263 INFO L899 garLoopResultBuilder]: For program point L232-1(lines 232 238) no Hoare annotation was computed. [2022-07-22 17:38:04,263 INFO L895 garLoopResultBuilder]: At program point L257(lines 212 259) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 (= 0 ~systemActive~0) .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-07-22 17:38:04,263 INFO L895 garLoopResultBuilder]: At program point L224(line 224) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 (= 0 ~systemActive~0) .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-07-22 17:38:04,263 INFO L902 garLoopResultBuilder]: At program point L988(lines 980 990) the Hoare annotation is: true [2022-07-22 17:38:04,263 INFO L895 garLoopResultBuilder]: At program point L885(lines 880 887) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2022-07-22 17:38:04,263 INFO L899 garLoopResultBuilder]: For program point L1001(lines 1001 1008) no Hoare annotation was computed. [2022-07-22 17:38:04,264 INFO L899 garLoopResultBuilder]: For program point L1001-2(lines 1001 1008) no Hoare annotation was computed. [2022-07-22 17:38:04,264 INFO L895 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-22 17:38:04,264 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 309 333) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-07-22 17:38:04,264 INFO L895 garLoopResultBuilder]: At program point L473(lines 458 476) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3 .cse4) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-07-22 17:38:04,264 INFO L895 garLoopResultBuilder]: At program point L184(lines 175 188) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse3 .cse1 .cse4)))) [2022-07-22 17:38:04,264 INFO L899 garLoopResultBuilder]: For program point L467(lines 467 471) no Hoare annotation was computed. [2022-07-22 17:38:04,264 INFO L899 garLoopResultBuilder]: For program point L467-2(lines 467 471) no Hoare annotation was computed. [2022-07-22 17:38:04,265 INFO L895 garLoopResultBuilder]: At program point L391(lines 386 393) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse3 .cse0 .cse1))) [2022-07-22 17:38:04,265 INFO L895 garLoopResultBuilder]: At program point L323(line 323) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))))) [2022-07-22 17:38:04,265 INFO L899 garLoopResultBuilder]: For program point L317(lines 317 325) no Hoare annotation was computed. [2022-07-22 17:38:04,265 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 309 333) no Hoare annotation was computed. [2022-07-22 17:38:04,265 INFO L899 garLoopResultBuilder]: For program point L313(lines 313 330) no Hoare annotation was computed. [2022-07-22 17:38:04,265 INFO L899 garLoopResultBuilder]: For program point L179(lines 179 185) no Hoare annotation was computed. [2022-07-22 17:38:04,265 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-07-22 17:38:04,265 INFO L899 garLoopResultBuilder]: For program point L328-1(lines 309 333) no Hoare annotation was computed. [2022-07-22 17:38:04,265 INFO L899 garLoopResultBuilder]: For program point L114-1(lines 110 121) no Hoare annotation was computed. [2022-07-22 17:38:04,266 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 110 121) no Hoare annotation was computed. [2022-07-22 17:38:04,266 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 110 121) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse0 .cse1 .cse3 .cse5) (or .cse4 .cse3 .cse5 (not (= 0 ~systemActive~0))) (or .cse0 .cse6 .cse2 .cse3 .cse5) (or .cse4 .cse0 .cse6 .cse3 .cse5))) [2022-07-22 17:38:04,266 INFO L895 garLoopResultBuilder]: At program point L349(line 349) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-07-22 17:38:04,266 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 335 359) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-07-22 17:38:04,266 INFO L895 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-07-22 17:38:04,266 INFO L899 garLoopResultBuilder]: For program point L343(lines 343 351) no Hoare annotation was computed. [2022-07-22 17:38:04,266 INFO L899 garLoopResultBuilder]: For program point L339(lines 339 356) no Hoare annotation was computed. [2022-07-22 17:38:04,267 INFO L895 garLoopResultBuilder]: At program point L492(lines 477 495) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-07-22 17:38:04,267 INFO L899 garLoopResultBuilder]: For program point L486(lines 486 490) no Hoare annotation was computed. [2022-07-22 17:38:04,267 INFO L899 garLoopResultBuilder]: For program point L486-2(lines 486 490) no Hoare annotation was computed. [2022-07-22 17:38:04,267 INFO L895 garLoopResultBuilder]: At program point L354(line 354) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-07-22 17:38:04,267 INFO L899 garLoopResultBuilder]: For program point L354-1(lines 335 359) no Hoare annotation was computed. [2022-07-22 17:38:04,267 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 335 359) no Hoare annotation was computed. [2022-07-22 17:38:04,267 INFO L895 garLoopResultBuilder]: At program point L194(lines 189 197) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-07-22 17:38:04,270 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:04,271 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-22 17:38:04,293 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.07 05:38:04 BoogieIcfgContainer [2022-07-22 17:38:04,294 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-22 17:38:04,294 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-22 17:38:04,294 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-22 17:38:04,294 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-22 17:38:04,295 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:37:54" (3/4) ... [2022-07-22 17:38:04,297 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-22 17:38:04,307 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-22 17:38:04,308 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-22 17:38:04,308 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-22 17:38:04,308 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-22 17:38:04,308 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-22 17:38:04,308 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-22 17:38:04,309 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:38:04,309 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-22 17:38:04,309 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-07-22 17:38:04,314 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-07-22 17:38:04,314 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-22 17:38:04,315 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-22 17:38:04,315 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-22 17:38:04,316 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-22 17:38:04,316 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:04,317 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:04,333 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-22 17:38:04,333 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 [2022-07-22 17:38:04,334 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 [2022-07-22 17:38:04,334 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) [2022-07-22 17:38:04,334 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-07-22 17:38:04,335 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-07-22 17:38:04,335 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || tmp == 0) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) [2022-07-22 17:38:04,335 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-07-22 17:38:04,336 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1 [2022-07-22 17:38:04,336 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) [2022-07-22 17:38:04,336 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-22 17:38:04,336 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-07-22 17:38:04,336 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-07-22 17:38:04,337 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-22 17:38:04,337 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-07-22 17:38:04,337 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-22 17:38:04,351 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-22 17:38:04,351 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-22 17:38:04,352 INFO L158 Benchmark]: Toolchain (without parser) took 10870.50ms. Allocated memory was 155.2MB in the beginning and 237.0MB in the end (delta: 81.8MB). Free memory was 125.6MB in the beginning and 117.4MB in the end (delta: 8.1MB). Peak memory consumption was 88.3MB. Max. memory is 16.1GB. [2022-07-22 17:38:04,352 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 98.6MB. Free memory was 58.0MB in the beginning and 57.9MB in the end (delta: 76.9kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 17:38:04,352 INFO L158 Benchmark]: CACSL2BoogieTranslator took 399.47ms. Allocated memory is still 155.2MB. Free memory was 125.2MB in the beginning and 123.0MB in the end (delta: 2.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-07-22 17:38:04,352 INFO L158 Benchmark]: Boogie Procedure Inliner took 60.75ms. Allocated memory is still 155.2MB. Free memory was 123.0MB in the beginning and 120.5MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-22 17:38:04,352 INFO L158 Benchmark]: Boogie Preprocessor took 23.20ms. Allocated memory is still 155.2MB. Free memory was 120.5MB in the beginning and 118.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-22 17:38:04,353 INFO L158 Benchmark]: RCFGBuilder took 470.67ms. Allocated memory is still 155.2MB. Free memory was 118.8MB in the beginning and 101.3MB in the end (delta: 17.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-22 17:38:04,353 INFO L158 Benchmark]: TraceAbstraction took 9854.67ms. Allocated memory was 155.2MB in the beginning and 237.0MB in the end (delta: 81.8MB). Free memory was 100.4MB in the beginning and 123.7MB in the end (delta: -23.3MB). Peak memory consumption was 113.1MB. Max. memory is 16.1GB. [2022-07-22 17:38:04,353 INFO L158 Benchmark]: Witness Printer took 57.05ms. Allocated memory is still 237.0MB. Free memory was 123.7MB in the beginning and 117.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-22 17:38:04,354 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 98.6MB. Free memory was 58.0MB in the beginning and 57.9MB in the end (delta: 76.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 399.47ms. Allocated memory is still 155.2MB. Free memory was 125.2MB in the beginning and 123.0MB in the end (delta: 2.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 60.75ms. Allocated memory is still 155.2MB. Free memory was 123.0MB in the beginning and 120.5MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 23.20ms. Allocated memory is still 155.2MB. Free memory was 120.5MB in the beginning and 118.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 470.67ms. Allocated memory is still 155.2MB. Free memory was 118.8MB in the beginning and 101.3MB in the end (delta: 17.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 9854.67ms. Allocated memory was 155.2MB in the beginning and 237.0MB in the end (delta: 81.8MB). Free memory was 100.4MB in the beginning and 123.7MB in the end (delta: -23.3MB). Peak memory consumption was 113.1MB. Max. memory is 16.1GB. * Witness Printer took 57.05ms. Allocated memory is still 237.0MB. Free memory was 123.7MB in the beginning and 117.4MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1019]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 106 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.8s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1782 SdHoareTripleChecker+Valid, 1.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1759 mSDsluCounter, 3995 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2444 mSDsCounter, 608 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2032 IncrementalHoareTripleChecker+Invalid, 2640 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 608 mSolverCounterUnsat, 1551 mSDtfsCounter, 2032 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 538 GetRequests, 439 SyntacticMatches, 3 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 97 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1891occurred in iteration=9, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 619 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 3303 PreInvPairs, 3552 NumberOfFragments, 3293 HoareAnnotationTreeSize, 3303 FomulaSimplifications, 240 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 49 FomulaSimplificationsInter, 16720 FormulaSimplificationTreeSizeReductionInter, 4.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 1005 NumberOfCodeBlocks, 1005 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 990 ConstructedInterpolants, 0 QuantifiedInterpolants, 1696 SizeOfPredicates, 5 NumberOfNonLiveVariables, 1500 ConjunctsInSsa, 15 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 224/234 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || tmp == 0) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 386]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 980]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 212]: Loop Invariant Derived loop invariant: (((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 1015]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 98]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1 - InvariantResult [Line: 413]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 929]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-07-22 17:38:04,399 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE