./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 791161d1 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a5df7e7a530538a677becf014bfb990c6b0570c5e1058d85d7e78cec25f53253 --- Real Ultimate output --- This is Ultimate 0.2.2-?-791161d [2022-07-22 17:37:56,366 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-22 17:37:56,367 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-22 17:37:56,402 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-22 17:37:56,402 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-22 17:37:56,403 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-22 17:37:56,405 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-22 17:37:56,406 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-22 17:37:56,408 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-22 17:37:56,411 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-22 17:37:56,412 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-22 17:37:56,413 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-22 17:37:56,414 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-22 17:37:56,415 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-22 17:37:56,416 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-22 17:37:56,418 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-22 17:37:56,419 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-22 17:37:56,420 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-22 17:37:56,421 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-22 17:37:56,425 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-22 17:37:56,426 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-22 17:37:56,427 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-22 17:37:56,428 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-22 17:37:56,428 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-22 17:37:56,429 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-22 17:37:56,434 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-22 17:37:56,435 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-22 17:37:56,435 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-22 17:37:56,436 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-22 17:37:56,436 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-22 17:37:56,437 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-22 17:37:56,437 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-22 17:37:56,438 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-22 17:37:56,439 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-22 17:37:56,439 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-22 17:37:56,440 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-22 17:37:56,440 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-22 17:37:56,440 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-22 17:37:56,440 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-22 17:37:56,441 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-22 17:37:56,441 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-22 17:37:56,442 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-22 17:37:56,443 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-22 17:37:56,471 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-22 17:37:56,472 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-22 17:37:56,472 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-22 17:37:56,472 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-22 17:37:56,472 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-22 17:37:56,473 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-22 17:37:56,473 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-22 17:37:56,473 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-22 17:37:56,473 INFO L138 SettingsManager]: * Use SBE=true [2022-07-22 17:37:56,474 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-22 17:37:56,474 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-22 17:37:56,474 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-22 17:37:56,475 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-22 17:37:56,475 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-22 17:37:56,475 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-22 17:37:56,475 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-22 17:37:56,475 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-22 17:37:56,475 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-22 17:37:56,475 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-22 17:37:56,476 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-22 17:37:56,476 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-22 17:37:56,477 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-22 17:37:56,477 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-22 17:37:56,477 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-22 17:37:56,477 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:37:56,477 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-22 17:37:56,477 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-22 17:37:56,478 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-22 17:37:56,478 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-22 17:37:56,478 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-22 17:37:56,478 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-22 17:37:56,478 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-22 17:37:56,478 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-22 17:37:56,479 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a5df7e7a530538a677becf014bfb990c6b0570c5e1058d85d7e78cec25f53253 [2022-07-22 17:37:56,659 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-22 17:37:56,674 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-22 17:37:56,676 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-22 17:37:56,677 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-22 17:37:56,677 INFO L275 PluginConnector]: CDTParser initialized [2022-07-22 17:37:56,678 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c [2022-07-22 17:37:56,719 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ca053b28b/4bedfcf64f9f42008e4838d356f6c14f/FLAG37dc61d12 [2022-07-22 17:37:57,121 INFO L306 CDTParser]: Found 1 translation units. [2022-07-22 17:37:57,122 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c [2022-07-22 17:37:57,141 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ca053b28b/4bedfcf64f9f42008e4838d356f6c14f/FLAG37dc61d12 [2022-07-22 17:37:57,150 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ca053b28b/4bedfcf64f9f42008e4838d356f6c14f [2022-07-22 17:37:57,153 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-22 17:37:57,155 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-22 17:37:57,158 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-22 17:37:57,158 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-22 17:37:57,160 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-22 17:37:57,161 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,162 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@53e3bb9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57, skipping insertion in model container [2022-07-22 17:37:57,162 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,167 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-22 17:37:57,190 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-22 17:37:57,388 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c[19170,19183] [2022-07-22 17:37:57,390 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:37:57,396 INFO L203 MainTranslator]: Completed pre-run [2022-07-22 17:37:57,442 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c[19170,19183] [2022-07-22 17:37:57,443 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:37:57,455 INFO L208 MainTranslator]: Completed translation [2022-07-22 17:37:57,455 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57 WrapperNode [2022-07-22 17:37:57,456 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-22 17:37:57,456 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-22 17:37:57,457 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-22 17:37:57,457 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-22 17:37:57,462 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,472 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,491 INFO L137 Inliner]: procedures = 58, calls = 158, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 279 [2022-07-22 17:37:57,492 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-22 17:37:57,493 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-22 17:37:57,493 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-22 17:37:57,493 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-22 17:37:57,499 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,499 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,501 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,501 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,505 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,509 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,510 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,512 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-22 17:37:57,513 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-22 17:37:57,513 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-22 17:37:57,513 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-22 17:37:57,514 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,519 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:37:57,529 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:37:57,547 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-22 17:37:57,557 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-22 17:37:57,577 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-22 17:37:57,578 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-22 17:37:57,578 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-22 17:37:57,578 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-22 17:37:57,578 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-22 17:37:57,578 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-22 17:37:57,578 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-22 17:37:57,578 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-22 17:37:57,579 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-22 17:37:57,579 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:37:57,579 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:37:57,579 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-22 17:37:57,579 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-22 17:37:57,579 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-22 17:37:57,579 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-22 17:37:57,579 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-22 17:37:57,579 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-22 17:37:57,580 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-22 17:37:57,634 INFO L234 CfgBuilder]: Building ICFG [2022-07-22 17:37:57,635 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-22 17:37:57,870 INFO L275 CfgBuilder]: Performing block encoding [2022-07-22 17:37:57,875 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-22 17:37:57,876 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-22 17:37:57,877 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:37:57 BoogieIcfgContainer [2022-07-22 17:37:57,878 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-22 17:37:57,879 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-22 17:37:57,879 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-22 17:37:57,881 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-22 17:37:57,882 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.07 05:37:57" (1/3) ... [2022-07-22 17:37:57,882 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@48da1efe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:37:57, skipping insertion in model container [2022-07-22 17:37:57,882 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57" (2/3) ... [2022-07-22 17:37:57,882 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@48da1efe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:37:57, skipping insertion in model container [2022-07-22 17:37:57,883 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:37:57" (3/3) ... [2022-07-22 17:37:57,884 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product58.cil.c [2022-07-22 17:37:57,894 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-22 17:37:57,894 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-22 17:37:57,928 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-22 17:37:57,933 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@484a1b6d, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@5ebbe951 [2022-07-22 17:37:57,933 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-22 17:37:57,936 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-07-22 17:37:57,943 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-22 17:37:57,943 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:57,944 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:57,944 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:57,948 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:57,948 INFO L85 PathProgramCache]: Analyzing trace with hash 1936540556, now seen corresponding path program 1 times [2022-07-22 17:37:57,954 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:57,955 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [902298613] [2022-07-22 17:37:57,955 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:57,955 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:58,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-22 17:37:58,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,082 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:58,082 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:58,082 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [902298613] [2022-07-22 17:37:58,083 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [902298613] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:58,083 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:58,083 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-22 17:37:58,084 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [982779522] [2022-07-22 17:37:58,085 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:58,088 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-22 17:37:58,088 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:58,105 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-22 17:37:58,106 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:37:58,107 INFO L87 Difference]: Start difference. First operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:58,151 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:58,152 INFO L93 Difference]: Finished difference Result 179 states and 244 transitions. [2022-07-22 17:37:58,153 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-22 17:37:58,154 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-22 17:37:58,155 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:58,162 INFO L225 Difference]: With dead ends: 179 [2022-07-22 17:37:58,162 INFO L226 Difference]: Without dead ends: 85 [2022-07-22 17:37:58,166 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:37:58,170 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:58,171 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:58,182 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-07-22 17:37:58,211 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-07-22 17:37:58,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 73 states have internal predecessors, (87), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-22 17:37:58,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-07-22 17:37:58,221 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2022-07-22 17:37:58,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:58,221 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-07-22 17:37:58,222 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:58,222 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-07-22 17:37:58,225 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-22 17:37:58,225 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:58,225 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:58,226 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-22 17:37:58,226 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:58,227 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:58,227 INFO L85 PathProgramCache]: Analyzing trace with hash -433728910, now seen corresponding path program 1 times [2022-07-22 17:37:58,228 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:58,228 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [755384673] [2022-07-22 17:37:58,228 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:58,228 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:58,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-22 17:37:58,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,303 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:58,304 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:58,304 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [755384673] [2022-07-22 17:37:58,304 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [755384673] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:58,304 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:58,304 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 17:37:58,304 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1157194632] [2022-07-22 17:37:58,305 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:58,305 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:37:58,306 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:58,306 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:37:58,306 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:37:58,306 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:58,316 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:58,317 INFO L93 Difference]: Finished difference Result 134 states and 174 transitions. [2022-07-22 17:37:58,317 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:37:58,317 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-22 17:37:58,318 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:58,318 INFO L225 Difference]: With dead ends: 134 [2022-07-22 17:37:58,318 INFO L226 Difference]: Without dead ends: 76 [2022-07-22 17:37:58,319 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:37:58,320 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 13 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:58,320 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 177 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:58,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-07-22 17:37:58,325 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-07-22 17:37:58,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 67 states have internal predecessors, (80), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-07-22 17:37:58,326 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2022-07-22 17:37:58,326 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 26 [2022-07-22 17:37:58,327 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:58,327 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2022-07-22 17:37:58,327 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:58,327 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2022-07-22 17:37:58,328 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-07-22 17:37:58,328 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:58,328 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:58,328 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-22 17:37:58,328 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:58,329 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:58,329 INFO L85 PathProgramCache]: Analyzing trace with hash -960870689, now seen corresponding path program 1 times [2022-07-22 17:37:58,329 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:58,329 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1715385312] [2022-07-22 17:37:58,329 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:58,330 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:58,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,380 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-22 17:37:58,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,383 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:58,383 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:58,383 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1715385312] [2022-07-22 17:37:58,383 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1715385312] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:58,383 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:58,384 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:37:58,384 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [549546992] [2022-07-22 17:37:58,384 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:58,384 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:37:58,384 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:58,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:37:58,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:37:58,385 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:58,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:58,441 INFO L93 Difference]: Finished difference Result 144 states and 189 transitions. [2022-07-22 17:37:58,441 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 17:37:58,441 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-07-22 17:37:58,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:58,442 INFO L225 Difference]: With dead ends: 144 [2022-07-22 17:37:58,442 INFO L226 Difference]: Without dead ends: 76 [2022-07-22 17:37:58,443 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:37:58,444 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 125 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:58,444 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 239 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:58,445 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-07-22 17:37:58,449 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-07-22 17:37:58,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 67 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-07-22 17:37:58,450 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 97 transitions. [2022-07-22 17:37:58,450 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 97 transitions. Word has length 31 [2022-07-22 17:37:58,451 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:58,451 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 97 transitions. [2022-07-22 17:37:58,451 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:58,451 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2022-07-22 17:37:58,452 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-07-22 17:37:58,452 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:58,452 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:58,452 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-22 17:37:58,453 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:58,453 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:58,453 INFO L85 PathProgramCache]: Analyzing trace with hash 1051649323, now seen corresponding path program 1 times [2022-07-22 17:37:58,453 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:58,453 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [943011158] [2022-07-22 17:37:58,454 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:58,454 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:58,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-22 17:37:58,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,547 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:58,547 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:58,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [943011158] [2022-07-22 17:37:58,547 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [943011158] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:58,547 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:58,548 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 17:37:58,548 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [775437160] [2022-07-22 17:37:58,548 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:58,548 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:37:58,548 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:58,549 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:37:58,549 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:37:58,549 INFO L87 Difference]: Start difference. First operand 76 states and 97 transitions. Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:58,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:58,580 INFO L93 Difference]: Finished difference Result 189 states and 247 transitions. [2022-07-22 17:37:58,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:37:58,581 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2022-07-22 17:37:58,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:58,581 INFO L225 Difference]: With dead ends: 189 [2022-07-22 17:37:58,581 INFO L226 Difference]: Without dead ends: 121 [2022-07-22 17:37:58,582 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:37:58,583 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 60 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:58,583 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 173 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:58,584 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2022-07-22 17:37:58,592 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 119. [2022-07-22 17:37:58,592 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 119 states, 93 states have (on average 1.3010752688172043) internal successors, (121), 101 states have internal predecessors, (121), 13 states have call successors, (13), 12 states have call predecessors, (13), 12 states have return successors, (17), 13 states have call predecessors, (17), 13 states have call successors, (17) [2022-07-22 17:37:58,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119 states to 119 states and 151 transitions. [2022-07-22 17:37:58,593 INFO L78 Accepts]: Start accepts. Automaton has 119 states and 151 transitions. Word has length 39 [2022-07-22 17:37:58,593 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:58,593 INFO L495 AbstractCegarLoop]: Abstraction has 119 states and 151 transitions. [2022-07-22 17:37:58,593 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:58,593 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 151 transitions. [2022-07-22 17:37:58,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-07-22 17:37:58,594 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:58,594 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:58,594 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-22 17:37:58,594 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:58,595 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:58,595 INFO L85 PathProgramCache]: Analyzing trace with hash 1776043399, now seen corresponding path program 1 times [2022-07-22 17:37:58,595 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:58,595 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1325417090] [2022-07-22 17:37:58,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:58,595 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:58,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-22 17:37:58,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:37:58,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-07-22 17:37:58,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,655 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:58,655 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:58,655 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1325417090] [2022-07-22 17:37:58,657 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1325417090] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:58,657 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:58,657 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:37:58,658 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1701068279] [2022-07-22 17:37:58,658 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:58,659 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:37:58,659 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:58,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:37:58,660 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:37:58,660 INFO L87 Difference]: Start difference. First operand 119 states and 151 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:37:58,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:58,786 INFO L93 Difference]: Finished difference Result 273 states and 359 transitions. [2022-07-22 17:37:58,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-22 17:37:58,787 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-07-22 17:37:58,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:58,791 INFO L225 Difference]: With dead ends: 273 [2022-07-22 17:37:58,791 INFO L226 Difference]: Without dead ends: 162 [2022-07-22 17:37:58,794 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-22 17:37:58,799 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 92 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 88 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 298 SdHoareTripleChecker+Invalid, 107 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 88 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:58,799 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 298 Invalid, 107 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 88 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:37:58,802 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2022-07-22 17:37:58,821 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 145. [2022-07-22 17:37:58,828 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 145 states, 114 states have (on average 1.2982456140350878) internal successors, (148), 122 states have internal predecessors, (148), 15 states have call successors, (15), 12 states have call predecessors, (15), 15 states have return successors, (22), 16 states have call predecessors, (22), 15 states have call successors, (22) [2022-07-22 17:37:58,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 145 states to 145 states and 185 transitions. [2022-07-22 17:37:58,829 INFO L78 Accepts]: Start accepts. Automaton has 145 states and 185 transitions. Word has length 47 [2022-07-22 17:37:58,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:58,829 INFO L495 AbstractCegarLoop]: Abstraction has 145 states and 185 transitions. [2022-07-22 17:37:58,830 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:37:58,830 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 185 transitions. [2022-07-22 17:37:58,835 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-07-22 17:37:58,835 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:58,836 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:58,836 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-22 17:37:58,836 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:58,836 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:58,837 INFO L85 PathProgramCache]: Analyzing trace with hash 1353341573, now seen corresponding path program 1 times [2022-07-22 17:37:58,837 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:58,837 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1520444954] [2022-07-22 17:37:58,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:58,837 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:58,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-22 17:37:58,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:37:58,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-07-22 17:37:58,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:58,931 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:58,931 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:58,931 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1520444954] [2022-07-22 17:37:58,931 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1520444954] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:58,932 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:58,932 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 17:37:58,932 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [935734958] [2022-07-22 17:37:58,932 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:58,932 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-22 17:37:58,933 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:58,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 17:37:58,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:37:58,933 INFO L87 Difference]: Start difference. First operand 145 states and 185 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:37:59,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:59,115 INFO L93 Difference]: Finished difference Result 419 states and 543 transitions. [2022-07-22 17:37:59,115 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-22 17:37:59,116 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-07-22 17:37:59,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:59,120 INFO L225 Difference]: With dead ends: 419 [2022-07-22 17:37:59,120 INFO L226 Difference]: Without dead ends: 282 [2022-07-22 17:37:59,121 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-07-22 17:37:59,122 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 155 mSDsluCounter, 348 mSDsCounter, 0 mSdLazyCounter, 194 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 162 SdHoareTripleChecker+Valid, 445 SdHoareTripleChecker+Invalid, 239 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 194 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:59,122 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [162 Valid, 445 Invalid, 239 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 194 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:37:59,123 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2022-07-22 17:37:59,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 268. [2022-07-22 17:37:59,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 268 states, 207 states have (on average 1.2608695652173914) internal successors, (261), 222 states have internal predecessors, (261), 30 states have call successors, (30), 24 states have call predecessors, (30), 30 states have return successors, (46), 32 states have call predecessors, (46), 30 states have call successors, (46) [2022-07-22 17:37:59,163 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 268 states to 268 states and 337 transitions. [2022-07-22 17:37:59,164 INFO L78 Accepts]: Start accepts. Automaton has 268 states and 337 transitions. Word has length 47 [2022-07-22 17:37:59,164 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:59,164 INFO L495 AbstractCegarLoop]: Abstraction has 268 states and 337 transitions. [2022-07-22 17:37:59,164 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:37:59,164 INFO L276 IsEmpty]: Start isEmpty. Operand 268 states and 337 transitions. [2022-07-22 17:37:59,165 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-07-22 17:37:59,165 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:59,165 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:59,165 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-22 17:37:59,165 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:59,166 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:59,166 INFO L85 PathProgramCache]: Analyzing trace with hash -767183671, now seen corresponding path program 1 times [2022-07-22 17:37:59,166 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:59,166 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1117317786] [2022-07-22 17:37:59,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:59,166 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:59,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:37:59,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:37:59,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:37:59,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-07-22 17:37:59,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,235 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:59,235 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:59,235 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1117317786] [2022-07-22 17:37:59,235 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1117317786] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:59,235 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:59,235 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 17:37:59,235 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1353035567] [2022-07-22 17:37:59,235 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:59,236 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-22 17:37:59,236 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:59,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 17:37:59,237 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:37:59,237 INFO L87 Difference]: Start difference. First operand 268 states and 337 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-22 17:37:59,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:59,531 INFO L93 Difference]: Finished difference Result 540 states and 680 transitions. [2022-07-22 17:37:59,532 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-07-22 17:37:59,532 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 51 [2022-07-22 17:37:59,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:59,535 INFO L225 Difference]: With dead ends: 540 [2022-07-22 17:37:59,535 INFO L226 Difference]: Without dead ends: 280 [2022-07-22 17:37:59,536 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2022-07-22 17:37:59,538 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 184 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 378 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 186 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 437 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 378 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:59,538 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [186 Valid, 214 Invalid, 437 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 378 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:37:59,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 280 states. [2022-07-22 17:37:59,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 280 to 266. [2022-07-22 17:37:59,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 205 states have (on average 1.2439024390243902) internal successors, (255), 220 states have internal predecessors, (255), 30 states have call successors, (30), 24 states have call predecessors, (30), 30 states have return successors, (46), 32 states have call predecessors, (46), 30 states have call successors, (46) [2022-07-22 17:37:59,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 331 transitions. [2022-07-22 17:37:59,564 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 331 transitions. Word has length 51 [2022-07-22 17:37:59,568 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:59,568 INFO L495 AbstractCegarLoop]: Abstraction has 266 states and 331 transitions. [2022-07-22 17:37:59,568 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-22 17:37:59,568 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 331 transitions. [2022-07-22 17:37:59,569 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-07-22 17:37:59,569 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:59,569 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:59,569 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-22 17:37:59,569 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:59,570 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:59,572 INFO L85 PathProgramCache]: Analyzing trace with hash 1398170692, now seen corresponding path program 1 times [2022-07-22 17:37:59,572 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:59,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [902516851] [2022-07-22 17:37:59,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:59,572 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:59,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:37:59,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:37:59,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:37:59,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-07-22 17:37:59,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,639 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-22 17:37:59,639 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:59,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [902516851] [2022-07-22 17:37:59,640 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [902516851] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:59,640 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:59,640 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 17:37:59,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1216866993] [2022-07-22 17:37:59,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:59,640 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-22 17:37:59,640 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:59,641 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 17:37:59,641 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:37:59,641 INFO L87 Difference]: Start difference. First operand 266 states and 331 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:37:59,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:59,842 INFO L93 Difference]: Finished difference Result 542 states and 695 transitions. [2022-07-22 17:37:59,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 17:37:59,842 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2022-07-22 17:37:59,842 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:59,844 INFO L225 Difference]: With dead ends: 542 [2022-07-22 17:37:59,844 INFO L226 Difference]: Without dead ends: 284 [2022-07-22 17:37:59,844 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-22 17:37:59,845 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 129 mSDsluCounter, 117 mSDsCounter, 0 mSdLazyCounter, 312 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 359 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 312 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:59,846 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 207 Invalid, 359 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 312 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:37:59,847 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 284 states. [2022-07-22 17:37:59,858 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 284 to 272. [2022-07-22 17:37:59,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 272 states, 211 states have (on average 1.2369668246445498) internal successors, (261), 226 states have internal predecessors, (261), 30 states have call successors, (30), 24 states have call predecessors, (30), 30 states have return successors, (46), 32 states have call predecessors, (46), 30 states have call successors, (46) [2022-07-22 17:37:59,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 272 states to 272 states and 337 transitions. [2022-07-22 17:37:59,859 INFO L78 Accepts]: Start accepts. Automaton has 272 states and 337 transitions. Word has length 57 [2022-07-22 17:37:59,860 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:59,860 INFO L495 AbstractCegarLoop]: Abstraction has 272 states and 337 transitions. [2022-07-22 17:37:59,860 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:37:59,860 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 337 transitions. [2022-07-22 17:37:59,867 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-07-22 17:37:59,867 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:59,868 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:59,868 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-22 17:37:59,868 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:59,868 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:59,868 INFO L85 PathProgramCache]: Analyzing trace with hash 412634824, now seen corresponding path program 1 times [2022-07-22 17:37:59,868 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:59,868 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1170213734] [2022-07-22 17:37:59,869 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:59,869 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:59,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:37:59,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:37:59,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:37:59,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-07-22 17:37:59,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,940 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-22 17:37:59,940 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:59,940 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1170213734] [2022-07-22 17:37:59,940 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1170213734] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:59,940 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:59,940 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:37:59,940 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1929364716] [2022-07-22 17:37:59,940 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:59,940 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:37:59,940 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:59,941 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:37:59,941 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:37:59,941 INFO L87 Difference]: Start difference. First operand 272 states and 337 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-22 17:38:00,187 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:00,187 INFO L93 Difference]: Finished difference Result 770 states and 997 transitions. [2022-07-22 17:38:00,188 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-22 17:38:00,188 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2022-07-22 17:38:00,188 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:00,190 INFO L225 Difference]: With dead ends: 770 [2022-07-22 17:38:00,190 INFO L226 Difference]: Without dead ends: 506 [2022-07-22 17:38:00,191 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-22 17:38:00,191 INFO L413 NwaCegarLoop]: 136 mSDtfsCounter, 286 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 276 mSolverCounterSat, 118 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 241 SdHoareTripleChecker+Invalid, 394 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 118 IncrementalHoareTripleChecker+Valid, 276 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:00,191 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [288 Valid, 241 Invalid, 394 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [118 Valid, 276 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:38:00,192 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 506 states. [2022-07-22 17:38:00,207 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 506 to 504. [2022-07-22 17:38:00,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 504 states, 385 states have (on average 1.2103896103896103) internal successors, (466), 408 states have internal predecessors, (466), 60 states have call successors, (60), 56 states have call predecessors, (60), 58 states have return successors, (103), 60 states have call predecessors, (103), 60 states have call successors, (103) [2022-07-22 17:38:00,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 504 states to 504 states and 629 transitions. [2022-07-22 17:38:00,209 INFO L78 Accepts]: Start accepts. Automaton has 504 states and 629 transitions. Word has length 57 [2022-07-22 17:38:00,210 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:00,210 INFO L495 AbstractCegarLoop]: Abstraction has 504 states and 629 transitions. [2022-07-22 17:38:00,210 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-22 17:38:00,210 INFO L276 IsEmpty]: Start isEmpty. Operand 504 states and 629 transitions. [2022-07-22 17:38:00,210 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-07-22 17:38:00,210 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:00,210 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:00,211 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-22 17:38:00,211 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:00,211 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:00,211 INFO L85 PathProgramCache]: Analyzing trace with hash -166866194, now seen corresponding path program 1 times [2022-07-22 17:38:00,211 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:00,211 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1314603237] [2022-07-22 17:38:00,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:00,211 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:00,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:38:00,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-22 17:38:00,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-22 17:38:00,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:00,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-22 17:38:00,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,321 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-22 17:38:00,321 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:00,321 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1314603237] [2022-07-22 17:38:00,321 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1314603237] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:38:00,321 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [113221998] [2022-07-22 17:38:00,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:00,322 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:00,323 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:00,325 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:38:00,358 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-22 17:38:00,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,426 INFO L263 TraceCheckSpWp]: Trace formula consists of 387 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-22 17:38:00,430 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:38:00,542 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:00,542 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 17:38:00,542 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [113221998] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:00,542 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-22 17:38:00,543 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2022-07-22 17:38:00,543 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [448160288] [2022-07-22 17:38:00,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:00,543 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-22 17:38:00,543 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:00,543 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 17:38:00,543 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=264, Unknown=0, NotChecked=0, Total=306 [2022-07-22 17:38:00,544 INFO L87 Difference]: Start difference. First operand 504 states and 629 transitions. Second operand has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-22 17:38:00,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:00,634 INFO L93 Difference]: Finished difference Result 978 states and 1227 transitions. [2022-07-22 17:38:00,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 17:38:00,634 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 61 [2022-07-22 17:38:00,634 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:00,636 INFO L225 Difference]: With dead ends: 978 [2022-07-22 17:38:00,636 INFO L226 Difference]: Without dead ends: 482 [2022-07-22 17:38:00,637 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-07-22 17:38:00,637 INFO L413 NwaCegarLoop]: 172 mSDtfsCounter, 67 mSDsluCounter, 501 mSDsCounter, 0 mSdLazyCounter, 113 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 673 SdHoareTripleChecker+Invalid, 115 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 113 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:00,637 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 673 Invalid, 115 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:00,638 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 482 states. [2022-07-22 17:38:00,652 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 482 to 480. [2022-07-22 17:38:00,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 480 states, 366 states have (on average 1.1939890710382515) internal successors, (437), 388 states have internal predecessors, (437), 58 states have call successors, (58), 54 states have call predecessors, (58), 55 states have return successors, (89), 57 states have call predecessors, (89), 58 states have call successors, (89) [2022-07-22 17:38:00,654 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 480 states to 480 states and 584 transitions. [2022-07-22 17:38:00,655 INFO L78 Accepts]: Start accepts. Automaton has 480 states and 584 transitions. Word has length 61 [2022-07-22 17:38:00,655 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:00,655 INFO L495 AbstractCegarLoop]: Abstraction has 480 states and 584 transitions. [2022-07-22 17:38:00,655 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-22 17:38:00,655 INFO L276 IsEmpty]: Start isEmpty. Operand 480 states and 584 transitions. [2022-07-22 17:38:00,656 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-07-22 17:38:00,656 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:00,656 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:00,678 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-22 17:38:00,876 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-22 17:38:00,876 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:00,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:00,876 INFO L85 PathProgramCache]: Analyzing trace with hash 1972813179, now seen corresponding path program 1 times [2022-07-22 17:38:00,876 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:00,876 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [717444444] [2022-07-22 17:38:00,876 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:00,877 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:00,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:38:00,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-22 17:38:00,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:38:00,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:00,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:38:00,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-07-22 17:38:00,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-07-22 17:38:00,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:00,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-07-22 17:38:00,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,980 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-07-22 17:38:00,980 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:00,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [717444444] [2022-07-22 17:38:00,980 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [717444444] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:38:00,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1921867426] [2022-07-22 17:38:00,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:00,981 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:00,981 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:00,982 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:38:00,983 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-22 17:38:01,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,054 INFO L263 TraceCheckSpWp]: Trace formula consists of 487 conjuncts, 7 conjunts are in the unsatisfiable core [2022-07-22 17:38:01,060 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:38:01,137 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-22 17:38:01,137 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 17:38:01,137 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1921867426] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:01,137 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-22 17:38:01,137 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-07-22 17:38:01,138 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1541956551] [2022-07-22 17:38:01,138 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:01,138 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:38:01,138 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:01,139 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:38:01,139 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:38:01,139 INFO L87 Difference]: Start difference. First operand 480 states and 584 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-22 17:38:01,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:01,170 INFO L93 Difference]: Finished difference Result 728 states and 903 transitions. [2022-07-22 17:38:01,171 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:38:01,171 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 100 [2022-07-22 17:38:01,172 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:01,174 INFO L225 Difference]: With dead ends: 728 [2022-07-22 17:38:01,174 INFO L226 Difference]: Without dead ends: 726 [2022-07-22 17:38:01,175 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:38:01,175 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 45 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:01,175 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 190 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:38:01,176 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 726 states. [2022-07-22 17:38:01,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 726 to 584. [2022-07-22 17:38:01,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 584 states, 447 states have (on average 1.203579418344519) internal successors, (538), 473 states have internal predecessors, (538), 70 states have call successors, (70), 65 states have call predecessors, (70), 66 states have return successors, (115), 67 states have call predecessors, (115), 70 states have call successors, (115) [2022-07-22 17:38:01,206 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 584 states to 584 states and 723 transitions. [2022-07-22 17:38:01,206 INFO L78 Accepts]: Start accepts. Automaton has 584 states and 723 transitions. Word has length 100 [2022-07-22 17:38:01,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:01,206 INFO L495 AbstractCegarLoop]: Abstraction has 584 states and 723 transitions. [2022-07-22 17:38:01,206 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-22 17:38:01,206 INFO L276 IsEmpty]: Start isEmpty. Operand 584 states and 723 transitions. [2022-07-22 17:38:01,208 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-07-22 17:38:01,208 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:01,208 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:01,226 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-22 17:38:01,425 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-22 17:38:01,426 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:01,426 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:01,426 INFO L85 PathProgramCache]: Analyzing trace with hash 1133837867, now seen corresponding path program 1 times [2022-07-22 17:38:01,426 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:01,426 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1393315241] [2022-07-22 17:38:01,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:01,426 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:01,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:38:01,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-22 17:38:01,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:38:01,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:01,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:38:01,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-07-22 17:38:01,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-22 17:38:01,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-22 17:38:01,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:01,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:01,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-07-22 17:38:01,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:01,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-07-22 17:38:01,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,536 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 59 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-07-22 17:38:01,536 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:01,536 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1393315241] [2022-07-22 17:38:01,536 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1393315241] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:38:01,536 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1217095277] [2022-07-22 17:38:01,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:01,536 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:01,536 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:01,537 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:38:01,538 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-22 17:38:01,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,627 INFO L263 TraceCheckSpWp]: Trace formula consists of 597 conjuncts, 11 conjunts are in the unsatisfiable core [2022-07-22 17:38:01,629 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:38:01,831 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 82 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-22 17:38:01,832 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-22 17:38:02,007 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 60 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-07-22 17:38:02,007 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1217095277] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-22 17:38:02,008 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-22 17:38:02,008 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 18 [2022-07-22 17:38:02,008 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1479017452] [2022-07-22 17:38:02,008 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-22 17:38:02,008 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-07-22 17:38:02,008 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:02,009 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-07-22 17:38:02,009 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=67, Invalid=239, Unknown=0, NotChecked=0, Total=306 [2022-07-22 17:38:02,009 INFO L87 Difference]: Start difference. First operand 584 states and 723 transitions. Second operand has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-07-22 17:38:03,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:03,628 INFO L93 Difference]: Finished difference Result 2158 states and 3302 transitions. [2022-07-22 17:38:03,628 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-07-22 17:38:03,628 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 142 [2022-07-22 17:38:03,629 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:03,637 INFO L225 Difference]: With dead ends: 2158 [2022-07-22 17:38:03,637 INFO L226 Difference]: Without dead ends: 1674 [2022-07-22 17:38:03,642 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 362 GetRequests, 308 SyntacticMatches, 5 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 621 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=616, Invalid=1934, Unknown=0, NotChecked=0, Total=2550 [2022-07-22 17:38:03,642 INFO L413 NwaCegarLoop]: 262 mSDtfsCounter, 1092 mSDsluCounter, 687 mSDsCounter, 0 mSdLazyCounter, 2007 mSolverCounterSat, 637 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1104 SdHoareTripleChecker+Valid, 949 SdHoareTripleChecker+Invalid, 2644 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 637 IncrementalHoareTripleChecker+Valid, 2007 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:03,643 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1104 Valid, 949 Invalid, 2644 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [637 Valid, 2007 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-07-22 17:38:03,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1674 states. [2022-07-22 17:38:03,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1674 to 1075. [2022-07-22 17:38:03,704 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1075 states, 822 states have (on average 1.1922141119221412) internal successors, (980), 870 states have internal predecessors, (980), 132 states have call successors, (132), 110 states have call predecessors, (132), 120 states have return successors, (227), 128 states have call predecessors, (227), 132 states have call successors, (227) [2022-07-22 17:38:03,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1075 states to 1075 states and 1339 transitions. [2022-07-22 17:38:03,708 INFO L78 Accepts]: Start accepts. Automaton has 1075 states and 1339 transitions. Word has length 142 [2022-07-22 17:38:03,708 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:03,708 INFO L495 AbstractCegarLoop]: Abstraction has 1075 states and 1339 transitions. [2022-07-22 17:38:03,708 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-07-22 17:38:03,709 INFO L276 IsEmpty]: Start isEmpty. Operand 1075 states and 1339 transitions. [2022-07-22 17:38:03,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-07-22 17:38:03,712 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:03,712 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:03,732 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-22 17:38:03,929 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:03,929 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:03,930 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:03,930 INFO L85 PathProgramCache]: Analyzing trace with hash 1788073835, now seen corresponding path program 1 times [2022-07-22 17:38:03,930 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:03,930 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2114009460] [2022-07-22 17:38:03,930 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:03,930 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:03,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:03,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:38:03,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:03,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-22 17:38:03,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:03,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:38:03,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:03,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:03,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:03,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:38:03,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:03,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-07-22 17:38:03,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:03,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-22 17:38:03,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:03,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-22 17:38:03,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:03,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:03,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:03,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:04,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-07-22 17:38:04,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:04,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-07-22 17:38:04,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,003 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2022-07-22 17:38:04,003 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:04,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2114009460] [2022-07-22 17:38:04,003 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2114009460] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:04,003 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:04,003 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-07-22 17:38:04,003 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1565854569] [2022-07-22 17:38:04,003 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:04,003 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-07-22 17:38:04,003 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:04,004 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-07-22 17:38:04,004 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2022-07-22 17:38:04,004 INFO L87 Difference]: Start difference. First operand 1075 states and 1339 transitions. Second operand has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-22 17:38:04,389 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:04,389 INFO L93 Difference]: Finished difference Result 1530 states and 1872 transitions. [2022-07-22 17:38:04,390 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-07-22 17:38:04,390 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 142 [2022-07-22 17:38:04,390 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:04,390 INFO L225 Difference]: With dead ends: 1530 [2022-07-22 17:38:04,391 INFO L226 Difference]: Without dead ends: 0 [2022-07-22 17:38:04,393 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=80, Invalid=300, Unknown=0, NotChecked=0, Total=380 [2022-07-22 17:38:04,394 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 271 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 556 mSolverCounterSat, 105 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 272 SdHoareTripleChecker+Valid, 223 SdHoareTripleChecker+Invalid, 661 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 105 IncrementalHoareTripleChecker+Valid, 556 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:04,394 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [272 Valid, 223 Invalid, 661 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [105 Valid, 556 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-22 17:38:04,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-22 17:38:04,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-22 17:38:04,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 17:38:04,394 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-22 17:38:04,394 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 142 [2022-07-22 17:38:04,395 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:04,395 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-22 17:38:04,395 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-22 17:38:04,395 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-22 17:38:04,395 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-22 17:38:04,397 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-22 17:38:04,397 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-07-22 17:38:04,398 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-22 17:38:09,249 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 629 635) no Hoare annotation was computed. [2022-07-22 17:38:09,249 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 629 635) the Hoare annotation is: true [2022-07-22 17:38:09,249 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse4 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3))) [2022-07-22 17:38:09,249 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2022-07-22 17:38:09,249 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2022-07-22 17:38:09,249 INFO L902 garLoopResultBuilder]: At program point L929(lines 904 933) the Hoare annotation is: true [2022-07-22 17:38:09,249 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 904 933) no Hoare annotation was computed. [2022-07-22 17:38:09,249 INFO L899 garLoopResultBuilder]: For program point L925(line 925) no Hoare annotation was computed. [2022-07-22 17:38:09,249 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 904 933) the Hoare annotation is: true [2022-07-22 17:38:09,249 INFO L899 garLoopResultBuilder]: For program point L918(lines 918 922) no Hoare annotation was computed. [2022-07-22 17:38:09,250 INFO L902 garLoopResultBuilder]: At program point L918-1(lines 918 922) the Hoare annotation is: true [2022-07-22 17:38:09,250 INFO L899 garLoopResultBuilder]: For program point L915(line 915) no Hoare annotation was computed. [2022-07-22 17:38:09,250 INFO L902 garLoopResultBuilder]: At program point L914-2(lines 914 928) the Hoare annotation is: true [2022-07-22 17:38:09,250 INFO L902 garLoopResultBuilder]: At program point L910(line 910) the Hoare annotation is: true [2022-07-22 17:38:09,250 INFO L899 garLoopResultBuilder]: For program point L910-1(line 910) no Hoare annotation was computed. [2022-07-22 17:38:09,250 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2022-07-22 17:38:09,250 INFO L899 garLoopResultBuilder]: For program point L609-1(lines 608 627) no Hoare annotation was computed. [2022-07-22 17:38:09,250 INFO L899 garLoopResultBuilder]: For program point L671(lines 671 679) no Hoare annotation was computed. [2022-07-22 17:38:09,250 INFO L895 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4) (or (and .cse2 (= ~methAndRunningLastTime~0 0) .cse3) .cse5 .cse6 .cse1 .cse4) (or .cse7 .cse5 .cse6 .cse1) (or .cse7 .cse5 .cse0 .cse1))) [2022-07-22 17:38:09,250 INFO L899 garLoopResultBuilder]: For program point L667(lines 667 684) no Hoare annotation was computed. [2022-07-22 17:38:09,250 INFO L895 garLoopResultBuilder]: At program point L812(lines 797 815) the Hoare annotation is: (let ((.cse11 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse3 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse5 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse6 (let ((.cse12 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse12) (and (not .cse12) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0))))) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse7 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) .cse7 .cse8) (or .cse9 .cse10 .cse11 .cse7) (or .cse10 .cse11 (and .cse1 .cse2 (= ~methAndRunningLastTime~0 0) .cse3 .cse4 .cse5 .cse6) .cse7 .cse8) (or .cse9 .cse10 .cse0 .cse7))) [2022-07-22 17:38:09,251 INFO L895 garLoopResultBuilder]: At program point L841(line 841) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0)) (.cse12 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse10 (<= 2 ~waterLevel~0)) (.cse2 (not .cse5)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (<= 1 |timeShift_processEnvironment_~tmp~5#1|)) (.cse14 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse15 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse11 (not .cse12)) (.cse18 (not (<= 2 |old(~waterLevel~0)|))) (.cse19 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse20 (let ((.cse22 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse22) (and (not .cse22) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0))))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse17 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (not .cse9))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (and .cse5 .cse10 .cse6 .cse8)) (or .cse0 .cse1 .cse11 (and .cse3 .cse4 .cse12 .cse6 .cse7 .cse8) .cse9) (let ((.cse16 (or (and .cse19 .cse4 .cse5 .cse17 .cse8 .cse20) (and .cse3 .cse4 .cse5 .cse17 .cse8)))) (or (and .cse13 .cse14 .cse15 .cse16) (and .cse5 .cse10 .cse17 .cse8) .cse2 (and .cse3 .cse16) .cse9 .cse18)) (let ((.cse21 (or (and .cse19 .cse4 .cse12 .cse17 .cse20) (and .cse3 .cse4 .cse12 .cse17 .cse8)))) (or .cse1 (and .cse13 .cse21 .cse14 .cse15) .cse11 (and .cse3 .cse21) .cse9 .cse18))))) [2022-07-22 17:38:09,251 INFO L899 garLoopResultBuilder]: For program point L841-1(line 841) no Hoare annotation was computed. [2022-07-22 17:38:09,251 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 605 628) no Hoare annotation was computed. [2022-07-22 17:38:09,251 INFO L895 garLoopResultBuilder]: At program point L738(lines 733 741) the Hoare annotation is: (let ((.cse4 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 0)) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) .cse5) (or .cse6 .cse5 .cse7) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse3 .cse4 (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse5 .cse7) (or .cse0 .cse1 .cse6 .cse5))) [2022-07-22 17:38:09,251 INFO L895 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 .cse3 (= ~methAndRunningLastTime~0 0) .cse4) .cse5 .cse6) (or .cse7 .cse5 (and .cse2 .cse3 .cse4) .cse6) (or .cse8 .cse0 .cse1 .cse5) (or .cse8 .cse0 .cse7 .cse5))) [2022-07-22 17:38:09,251 INFO L895 garLoopResultBuilder]: At program point L677(line 677) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse1 .cse2) (or .cse5 .cse3 .cse4 .cse1) (or .cse5 .cse3 .cse0 .cse1))) [2022-07-22 17:38:09,251 INFO L895 garLoopResultBuilder]: At program point L719(lines 714 721) the Hoare annotation is: (let ((.cse1 (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (let ((.cse7 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse7) (and (not .cse7) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0)))))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse1 .cse2 .cse3) (or .cse6 .cse4 .cse5 .cse2) (or .cse6 .cse4 .cse0 .cse2))) [2022-07-22 17:38:09,251 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 857) no Hoare annotation was computed. [2022-07-22 17:38:09,251 INFO L899 garLoopResultBuilder]: For program point L1004(line 1004) no Hoare annotation was computed. [2022-07-22 17:38:09,251 INFO L899 garLoopResultBuilder]: For program point L843(lines 843 860) no Hoare annotation was computed. [2022-07-22 17:38:09,251 INFO L895 garLoopResultBuilder]: At program point L682(line 682) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0)) (.cse3 (= ~methaneLevelCritical~0 0))) (let ((.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse3)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse4 (not .cse5))) (and (or .cse0 (and .cse1 .cse2 .cse3 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse4) .cse5 .cse6) (or .cse7 .cse8 (and .cse1 .cse2) .cse5 .cse6) (or .cse9 .cse7 .cse8 .cse5 (and .cse2 .cse10 .cse11)) (or .cse9 .cse7 .cse0 (and .cse1 .cse2 .cse3 .cse10 .cse11 .cse4) .cse5)))) [2022-07-22 17:38:09,251 INFO L895 garLoopResultBuilder]: At program point L843-1(lines 835 863) the Hoare annotation is: (let ((.cse17 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (<= 2 ~waterLevel~0)) (.cse2 (not .cse17)) (.cse5 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (<= 1 |timeShift_processEnvironment_~tmp~5#1|)) (.cse19 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse14 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse11 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse15 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse20 (let ((.cse21 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse21) (and (not .cse21) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0))))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse8 (= 0 ~systemActive~0)) (.cse16 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse6) .cse8) (or .cse0 .cse1 .cse9 (and .cse10 .cse3 .cse4 .cse6) .cse8) (let ((.cse12 (let ((.cse18 (not .cse8))) (or (and .cse10 .cse3 .cse4 .cse17 .cse5 .cse11 .cse18) (and .cse19 .cse3 .cse4 .cse17 .cse5 .cse11 .cse18 .cse20))))) (or (and .cse4 .cse7 .cse5 .cse11) (and .cse10 .cse12) (and .cse13 .cse12 .cse14 .cse15) .cse2 .cse8 .cse16)) (or .cse1 (and .cse13 .cse19 .cse3 .cse4 .cse14 .cse11 .cse15 .cse20) .cse9 (and .cse10 .cse3) .cse8 .cse16)))) [2022-07-22 17:38:09,252 INFO L895 garLoopResultBuilder]: At program point L682-1(lines 663 687) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0)) (.cse12 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse10 (<= 2 ~waterLevel~0)) (.cse2 (not .cse5)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (<= 1 |timeShift_processEnvironment_~tmp~5#1|)) (.cse14 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse15 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse11 (not .cse12)) (.cse18 (not (<= 2 |old(~waterLevel~0)|))) (.cse19 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse20 (let ((.cse22 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse22) (and (not .cse22) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0))))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse17 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (not .cse9))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (and .cse5 .cse10 .cse6 .cse8)) (or .cse0 .cse1 .cse11 (and .cse3 .cse4 .cse12 .cse6 .cse7 .cse8) .cse9) (let ((.cse16 (or (and .cse19 .cse4 .cse5 .cse17 .cse8 .cse20) (and .cse3 .cse4 .cse5 .cse17 .cse8)))) (or (and .cse13 .cse14 .cse15 .cse16) (and .cse5 .cse10 .cse17 .cse8) .cse2 (and .cse3 .cse16) .cse9 .cse18)) (let ((.cse21 (or (and .cse19 .cse4 .cse12 .cse17 .cse20) (and .cse3 .cse4 .cse12 .cse17 .cse8)))) (or .cse1 (and .cse13 .cse21 .cse14 .cse15) .cse11 (and .cse3 .cse21) .cse9 .cse18))))) [2022-07-22 17:38:09,252 INFO L899 garLoopResultBuilder]: For program point L616-1(lines 616 622) no Hoare annotation was computed. [2022-07-22 17:38:09,252 INFO L899 garLoopResultBuilder]: For program point L806(lines 806 810) no Hoare annotation was computed. [2022-07-22 17:38:09,252 INFO L899 garLoopResultBuilder]: For program point L806-2(lines 806 810) no Hoare annotation was computed. [2022-07-22 17:38:09,252 INFO L899 garLoopResultBuilder]: For program point L848(lines 848 854) no Hoare annotation was computed. [2022-07-22 17:38:09,252 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 605 628) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) .cse8 .cse9)) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8 .cse9)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse1 .cse2 .cse6) (or .cse4 .cse5 .cse7 .cse2 .cse6) (or .cse5 .cse7 .cse0 .cse2 .cse3)))) [2022-07-22 17:38:09,252 INFO L895 garLoopResultBuilder]: At program point L1005(lines 1000 1007) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse1 .cse2) (or .cse5 .cse3 .cse4 .cse1) (or .cse5 .cse3 .cse0 .cse1))) [2022-07-22 17:38:09,252 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 605 628) no Hoare annotation was computed. [2022-07-22 17:38:09,252 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1004) no Hoare annotation was computed. [2022-07-22 17:38:09,252 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 96 104) the Hoare annotation is: true [2022-07-22 17:38:09,252 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 96 104) no Hoare annotation was computed. [2022-07-22 17:38:09,252 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2022-07-22 17:38:09,252 INFO L895 garLoopResultBuilder]: At program point L832(lines 827 834) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:09,252 INFO L895 garLoopResultBuilder]: At program point L890(lines 886 892) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:09,252 INFO L899 garLoopResultBuilder]: For program point L560(lines 560 566) no Hoare annotation was computed. [2022-07-22 17:38:09,252 INFO L899 garLoopResultBuilder]: For program point L560-1(lines 560 566) no Hoare annotation was computed. [2022-07-22 17:38:09,252 INFO L902 garLoopResultBuilder]: At program point L973(lines 965 975) the Hoare annotation is: true [2022-07-22 17:38:09,253 INFO L895 garLoopResultBuilder]: At program point L585(lines 540 587) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5) (and .cse1 .cse6 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-07-22 17:38:09,253 INFO L895 garLoopResultBuilder]: At program point L552(line 552) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5) (and .cse1 .cse6 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-07-22 17:38:09,253 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-22 17:38:09,253 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-22 17:38:09,253 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-22 17:38:09,253 INFO L899 garLoopResultBuilder]: For program point L986(lines 986 993) no Hoare annotation was computed. [2022-07-22 17:38:09,253 INFO L899 garLoopResultBuilder]: For program point L986-2(lines 986 993) no Hoare annotation was computed. [2022-07-22 17:38:09,253 INFO L895 garLoopResultBuilder]: At program point L821(lines 816 823) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse8 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse3 .cse8 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse2 .cse3 .cse8 .cse4 .cse5 .cse6))) [2022-07-22 17:38:09,253 INFO L895 garLoopResultBuilder]: At program point L883(lines 879 885) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:09,253 INFO L902 garLoopResultBuilder]: At program point L995(lines 976 998) the Hoare annotation is: true [2022-07-22 17:38:09,253 INFO L895 garLoopResultBuilder]: At program point L962(lines 958 964) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:09,253 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 582) no Hoare annotation was computed. [2022-07-22 17:38:09,253 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-22 17:38:09,253 INFO L895 garLoopResultBuilder]: At program point L578-2(lines 570 583) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse8 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse3 .cse8 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse2 .cse3 .cse8 .cse4 .cse5 .cse6))) [2022-07-22 17:38:09,253 INFO L899 garLoopResultBuilder]: For program point L541(lines 540 587) no Hoare annotation was computed. [2022-07-22 17:38:09,253 INFO L899 garLoopResultBuilder]: For program point L570(lines 570 583) no Hoare annotation was computed. [2022-07-22 17:38:09,253 INFO L895 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5) (and .cse1 .cse6 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2022-07-22 17:38:09,253 INFO L902 garLoopResultBuilder]: At program point L591(lines 530 595) the Hoare annotation is: true [2022-07-22 17:38:09,254 INFO L899 garLoopResultBuilder]: For program point L550(lines 550 556) no Hoare annotation was computed. [2022-07-22 17:38:09,254 INFO L899 garLoopResultBuilder]: For program point L550-1(lines 550 556) no Hoare annotation was computed. [2022-07-22 17:38:09,254 INFO L899 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2022-07-22 17:38:09,254 INFO L895 garLoopResultBuilder]: At program point L588(lines 539 589) the Hoare annotation is: false [2022-07-22 17:38:09,254 INFO L895 garLoopResultBuilder]: At program point L898(lines 893 901) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:09,254 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 637 661) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~waterLevel~0 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3 .cse5) (or .cse6 .cse7 .cse2 .cse3) (or .cse6 .cse7 .cse4 .cse3 .cse5))) [2022-07-22 17:38:09,254 INFO L899 garLoopResultBuilder]: For program point L704(lines 704 710) no Hoare annotation was computed. [2022-07-22 17:38:09,254 INFO L895 garLoopResultBuilder]: At program point L704-2(lines 697 713) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse5 .cse6 .cse1 .cse2) (or (and (= ~pumpRunning~0 0) .cse6 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|)) .cse5 .cse3 .cse2 .cse4))) [2022-07-22 17:38:09,254 INFO L895 garLoopResultBuilder]: At program point L793(lines 778 796) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~pumpRunning~0 0)) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)) (.cse13 (= ~methaneLevelCritical~0 0)) (.cse12 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (.cse6 (not .cse3))) (let ((.cse1 (not (= ~waterLevel~0 0))) (.cse0 (and .cse4 .cse5 .cse11 .cse13 .cse12 .cse6)) (.cse2 (not .cse13)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and .cse4 .cse5 (<= 2 ~waterLevel~0) .cse6)) (.cse8 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (and .cse4 .cse5 .cse6) .cse1 .cse7 .cse3 .cse8) (or .cse9 .cse0 .cse2 .cse10 .cse3) (or .cse9 (and .cse4 .cse5 .cse11 .cse12 .cse6) .cse7 .cse10 .cse3 .cse8))))) [2022-07-22 17:38:09,254 INFO L895 garLoopResultBuilder]: At program point L729(lines 722 732) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse0 (not (= ~waterLevel~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse9 (not .cse2)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse5 .cse1 (and .cse6 .cse7 .cse8 .cse9) .cse2) (or .cse5 (and .cse6 .cse7 .cse8 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) .cse9) .cse3 .cse2 .cse4)))) [2022-07-22 17:38:09,254 INFO L895 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse0 (not (= ~waterLevel~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) (not .cse2))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse5 .cse1 .cse6 .cse2) (or .cse5 .cse3 .cse6 .cse2 .cse4)))) [2022-07-22 17:38:09,254 INFO L899 garLoopResultBuilder]: For program point L727-1(line 727) no Hoare annotation was computed. [2022-07-22 17:38:09,254 INFO L899 garLoopResultBuilder]: For program point L787(lines 787 791) no Hoare annotation was computed. [2022-07-22 17:38:09,254 INFO L899 garLoopResultBuilder]: For program point L787-2(lines 787 791) no Hoare annotation was computed. [2022-07-22 17:38:09,254 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2022-07-22 17:38:09,254 INFO L895 garLoopResultBuilder]: At program point L651(line 651) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse8 (= ~methaneLevelCritical~0 0)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0)) (.cse12 (not .cse3))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and .cse9 .cse10 .cse11 .cse12)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (and .cse9 .cse10 .cse11 .cse8 .cse12)) (.cse7 (not (= ~waterLevel~0 0))) (.cse2 (not .cse8))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse3 .cse6) (or .cse7 .cse4 .cse5 .cse3 .cse6) (or .cse1 .cse7 .cse2 .cse3))))) [2022-07-22 17:38:09,255 INFO L899 garLoopResultBuilder]: For program point L645(lines 645 653) no Hoare annotation was computed. [2022-07-22 17:38:09,255 INFO L899 garLoopResultBuilder]: For program point L641(lines 641 658) no Hoare annotation was computed. [2022-07-22 17:38:09,255 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 637 661) no Hoare annotation was computed. [2022-07-22 17:38:09,255 INFO L895 garLoopResultBuilder]: At program point L693(lines 688 695) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse5 .cse3 .cse2 .cse4) (or .cse5 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2022-07-22 17:38:09,255 INFO L895 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0)) (.cse10 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (.cse11 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not (= ~waterLevel~0 0))) (.cse7 (not .cse11)) (.cse9 (and .cse2 .cse3 .cse11 (not .cse4) .cse10)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (and .cse3 (<= 2 ~waterLevel~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse4 .cse9) (or .cse0 .cse7 .cse4 .cse9) (or .cse6 (and .cse3 .cse10) .cse1 .cse8 .cse4 .cse5)))) [2022-07-22 17:38:09,255 INFO L895 garLoopResultBuilder]: At program point L656(line 656) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (not (= ~waterLevel~0 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse5 .cse6 .cse1 .cse2) (or .cse5 .cse6 .cse3 .cse2 .cse4))) [2022-07-22 17:38:09,255 INFO L899 garLoopResultBuilder]: For program point L656-1(lines 637 661) no Hoare annotation was computed. [2022-07-22 17:38:09,255 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2022-07-22 17:38:09,255 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2022-07-22 17:38:09,255 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse0 .cse1 .cse2 .cse3) (or .cse4 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2 .cse3))) [2022-07-22 17:38:09,257 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:09,259 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-22 17:38:09,299 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.07 05:38:09 BoogieIcfgContainer [2022-07-22 17:38:09,308 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-22 17:38:09,309 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-22 17:38:09,309 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-22 17:38:09,309 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-22 17:38:09,309 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:37:57" (3/4) ... [2022-07-22 17:38:09,311 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-22 17:38:09,315 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-22 17:38:09,315 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-22 17:38:09,315 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-22 17:38:09,315 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-22 17:38:09,315 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-22 17:38:09,316 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:38:09,316 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-22 17:38:09,324 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-07-22 17:38:09,325 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-22 17:38:09,325 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-22 17:38:09,326 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-22 17:38:09,326 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-22 17:38:09,326 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:09,326 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:09,344 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-22 17:38:09,345 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2022-07-22 17:38:09,345 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2022-07-22 17:38:09,345 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2022-07-22 17:38:09,346 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(methaneLevelCritical == 0) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-22 17:38:09,346 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime) && !(0 == systemActive))) || 0 == systemActive) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime) && !(0 == systemActive))) || 0 == systemActive)) && ((((((((1 <= tmp && 1 <= \result) && 1 <= tmp___0) && ((((((\result == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)))) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && ((((((\result == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || (((1 <= tmp && (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)))) && 1 <= \result) && 1 <= tmp___0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))))) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-22 17:38:09,347 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((methAndRunningLastTime == 0 && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2022-07-22 17:38:09,347 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && ((((((((methAndRunningLastTime == 0 && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) || (pumpRunning == \old(pumpRunning) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))))) || (((1 <= tmp && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))))) && 1 <= \result) && 1 <= tmp___0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-22 17:38:09,348 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && methaneLevelCritical <= \result) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-07-22 17:38:09,348 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || 0 == systemActive) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-22 17:38:09,348 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(methaneLevelCritical == 0) || 0 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-22 17:38:09,348 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp) && methaneLevelCritical <= \result) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-07-22 17:38:09,348 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && \result == 1))) && (((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && \result == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-07-22 17:38:09,349 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-22 17:38:09,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(methaneLevelCritical == 0) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-22 17:38:09,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-22 17:38:09,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && methaneLevelCritical == 0) && \result == 0) && !(0 == systemActive)) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && methaneLevelCritical == 0) && \result == 0) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-07-22 17:38:09,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(methaneLevelCritical == 0) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-22 17:38:09,384 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-22 17:38:09,384 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-22 17:38:09,385 INFO L158 Benchmark]: Toolchain (without parser) took 12229.87ms. Allocated memory was 81.8MB in the beginning and 249.6MB in the end (delta: 167.8MB). Free memory was 57.1MB in the beginning and 132.1MB in the end (delta: -75.0MB). Peak memory consumption was 92.2MB. Max. memory is 16.1GB. [2022-07-22 17:38:09,385 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 81.8MB. Free memory was 57.6MB in the beginning and 57.6MB in the end (delta: 40.1kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 17:38:09,385 INFO L158 Benchmark]: CACSL2BoogieTranslator took 298.27ms. Allocated memory was 81.8MB in the beginning and 100.7MB in the end (delta: 18.9MB). Free memory was 56.9MB in the beginning and 66.7MB in the end (delta: -9.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-07-22 17:38:09,385 INFO L158 Benchmark]: Boogie Procedure Inliner took 35.72ms. Allocated memory is still 100.7MB. Free memory was 66.7MB in the beginning and 64.1MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-22 17:38:09,385 INFO L158 Benchmark]: Boogie Preprocessor took 20.03ms. Allocated memory is still 100.7MB. Free memory was 64.1MB in the beginning and 62.6MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-22 17:38:09,385 INFO L158 Benchmark]: RCFGBuilder took 364.51ms. Allocated memory is still 100.7MB. Free memory was 62.6MB in the beginning and 74.5MB in the end (delta: -11.9MB). Peak memory consumption was 17.0MB. Max. memory is 16.1GB. [2022-07-22 17:38:09,386 INFO L158 Benchmark]: TraceAbstraction took 11429.37ms. Allocated memory was 100.7MB in the beginning and 249.6MB in the end (delta: 148.9MB). Free memory was 74.0MB in the beginning and 137.4MB in the end (delta: -63.4MB). Peak memory consumption was 123.3MB. Max. memory is 16.1GB. [2022-07-22 17:38:09,386 INFO L158 Benchmark]: Witness Printer took 75.52ms. Allocated memory is still 249.6MB. Free memory was 137.4MB in the beginning and 132.1MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-22 17:38:09,387 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 81.8MB. Free memory was 57.6MB in the beginning and 57.6MB in the end (delta: 40.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 298.27ms. Allocated memory was 81.8MB in the beginning and 100.7MB in the end (delta: 18.9MB). Free memory was 56.9MB in the beginning and 66.7MB in the end (delta: -9.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 35.72ms. Allocated memory is still 100.7MB. Free memory was 66.7MB in the beginning and 64.1MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 20.03ms. Allocated memory is still 100.7MB. Free memory was 64.1MB in the beginning and 62.6MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 364.51ms. Allocated memory is still 100.7MB. Free memory was 62.6MB in the beginning and 74.5MB in the end (delta: -11.9MB). Peak memory consumption was 17.0MB. Max. memory is 16.1GB. * TraceAbstraction took 11429.37ms. Allocated memory was 100.7MB in the beginning and 249.6MB in the end (delta: 148.9MB). Free memory was 74.0MB in the beginning and 137.4MB in the end (delta: -63.4MB). Peak memory consumption was 123.3MB. Max. memory is 16.1GB. * Witness Printer took 75.52ms. Allocated memory is still 249.6MB. Free memory was 137.4MB in the beginning and 132.1MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1004]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.3s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2553 SdHoareTripleChecker+Valid, 2.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2519 mSDsluCounter, 4148 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2583 mSDsCounter, 1051 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3946 IncrementalHoareTripleChecker+Invalid, 4997 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1051 mSolverCounterUnsat, 1565 mSDtfsCounter, 3946 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 743 GetRequests, 587 SyntacticMatches, 6 SemanticMatches, 150 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 751 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1075occurred in iteration=12, InterpolantAutomatonStates: 133, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 13 MinimizatonAttempts, 804 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 1831 PreInvPairs, 2107 NumberOfFragments, 3377 HoareAnnotationTreeSize, 1831 FomulaSimplifications, 300 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 44 FomulaSimplificationsInter, 18188 FormulaSimplificationTreeSizeReductionInter, 4.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.4s InterpolantComputationTime, 1128 NumberOfCodeBlocks, 1128 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1253 ConstructedInterpolants, 0 QuantifiedInterpolants, 2451 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1471 ConjunctsInSsa, 26 ConjunctsInUnsatCore, 17 InterpolantComputations, 12 PerfectInterpolantSequences, 435/478 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 976]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 663]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime) && !(0 == systemActive))) || 0 == systemActive) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime) && !(0 == systemActive))) || 0 == systemActive)) && ((((((((1 <= tmp && 1 <= \result) && 1 <= tmp___0) && ((((((\result == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)))) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && ((((((\result == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || (((1 <= tmp && (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)))) && 1 <= \result) && 1 <= tmp___0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))))) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 697]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp) && methaneLevelCritical <= \result) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && ((((((((methAndRunningLastTime == 0 && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) || (pumpRunning == \old(pumpRunning) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))))) || (((1 <= tmp && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))))) && 1 <= \result) && 1 <= tmp___0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 1000]: Loop Invariant Derived loop invariant: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 733]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || 0 == systemActive) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 904]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 714]: Loop Invariant Derived loop invariant: (((((!(methaneLevelCritical == 0) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && methaneLevelCritical <= \result) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 539]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 797]: Loop Invariant Derived loop invariant: (((((!(methaneLevelCritical == 0) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 816]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((methAndRunningLastTime == 0 && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((((!(methaneLevelCritical == 0) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: ((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(methaneLevelCritical == 0) || 0 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((((((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && \result == 1))) && (((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && \result == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 965]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 778]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && methaneLevelCritical == 0) && \result == 0) && !(0 == systemActive)) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && methaneLevelCritical == 0) && \result == 0) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(methAndRunningLastTime == 0)) RESULT: Ultimate proved your program to be correct! [2022-07-22 17:38:09,433 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE