./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 791161d1 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a218bb67596641a4ce71d6987e627686ed630ab4299f0e9b54dfa98d78549c82 --- Real Ultimate output --- This is Ultimate 0.2.2-?-791161d [2022-07-22 17:37:57,190 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-22 17:37:57,192 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-22 17:37:57,222 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-22 17:37:57,222 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-22 17:37:57,224 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-22 17:37:57,227 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-22 17:37:57,231 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-22 17:37:57,233 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-22 17:37:57,237 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-22 17:37:57,238 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-22 17:37:57,240 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-22 17:37:57,240 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-22 17:37:57,241 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-22 17:37:57,243 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-22 17:37:57,244 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-22 17:37:57,244 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-22 17:37:57,246 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-22 17:37:57,249 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-22 17:37:57,252 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-22 17:37:57,254 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-22 17:37:57,255 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-22 17:37:57,255 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-22 17:37:57,256 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-22 17:37:57,257 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-22 17:37:57,260 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-22 17:37:57,261 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-22 17:37:57,261 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-22 17:37:57,262 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-22 17:37:57,262 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-22 17:37:57,263 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-22 17:37:57,263 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-22 17:37:57,264 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-22 17:37:57,265 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-22 17:37:57,265 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-22 17:37:57,266 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-22 17:37:57,266 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-22 17:37:57,266 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-22 17:37:57,267 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-22 17:37:57,267 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-22 17:37:57,267 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-22 17:37:57,269 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-22 17:37:57,270 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-22 17:37:57,303 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-22 17:37:57,304 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-22 17:37:57,304 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-22 17:37:57,304 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-22 17:37:57,305 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-22 17:37:57,305 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-22 17:37:57,305 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-22 17:37:57,306 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-22 17:37:57,306 INFO L138 SettingsManager]: * Use SBE=true [2022-07-22 17:37:57,306 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-22 17:37:57,307 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-22 17:37:57,307 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-22 17:37:57,307 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-22 17:37:57,307 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-22 17:37:57,307 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-22 17:37:57,307 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-22 17:37:57,307 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-22 17:37:57,308 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-22 17:37:57,308 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-22 17:37:57,308 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-22 17:37:57,308 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-22 17:37:57,308 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-22 17:37:57,308 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-22 17:37:57,308 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-22 17:37:57,313 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:37:57,313 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-22 17:37:57,313 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-22 17:37:57,313 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-22 17:37:57,314 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-22 17:37:57,314 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-22 17:37:57,314 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-22 17:37:57,314 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-22 17:37:57,314 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-22 17:37:57,314 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a218bb67596641a4ce71d6987e627686ed630ab4299f0e9b54dfa98d78549c82 [2022-07-22 17:37:57,486 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-22 17:37:57,498 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-22 17:37:57,500 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-22 17:37:57,501 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-22 17:37:57,501 INFO L275 PluginConnector]: CDTParser initialized [2022-07-22 17:37:57,502 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c [2022-07-22 17:37:57,553 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5a9b91091/a4808fc4fc91415089fbb4af6a9f5a97/FLAG2d80e248f [2022-07-22 17:37:57,967 INFO L306 CDTParser]: Found 1 translation units. [2022-07-22 17:37:57,968 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c [2022-07-22 17:37:57,980 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5a9b91091/a4808fc4fc91415089fbb4af6a9f5a97/FLAG2d80e248f [2022-07-22 17:37:57,988 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5a9b91091/a4808fc4fc91415089fbb4af6a9f5a97 [2022-07-22 17:37:57,990 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-22 17:37:57,991 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-22 17:37:57,991 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-22 17:37:57,992 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-22 17:37:57,994 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-22 17:37:57,994 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,995 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@57200d09 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:57, skipping insertion in model container [2022-07-22 17:37:57,995 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:37:57" (1/1) ... [2022-07-22 17:37:57,999 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-22 17:37:58,041 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-22 17:37:58,196 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c[3241,3254] [2022-07-22 17:37:58,269 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:37:58,275 INFO L203 MainTranslator]: Completed pre-run [2022-07-22 17:37:58,287 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c[3241,3254] [2022-07-22 17:37:58,321 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:37:58,332 INFO L208 MainTranslator]: Completed translation [2022-07-22 17:37:58,333 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:58 WrapperNode [2022-07-22 17:37:58,333 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-22 17:37:58,334 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-22 17:37:58,334 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-22 17:37:58,334 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-22 17:37:58,339 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:58" (1/1) ... [2022-07-22 17:37:58,348 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:58" (1/1) ... [2022-07-22 17:37:58,366 INFO L137 Inliner]: procedures = 59, calls = 160, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 282 [2022-07-22 17:37:58,366 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-22 17:37:58,367 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-22 17:37:58,367 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-22 17:37:58,367 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-22 17:37:58,372 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:58" (1/1) ... [2022-07-22 17:37:58,372 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:58" (1/1) ... [2022-07-22 17:37:58,374 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:58" (1/1) ... [2022-07-22 17:37:58,375 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:58" (1/1) ... [2022-07-22 17:37:58,379 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:58" (1/1) ... [2022-07-22 17:37:58,382 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:58" (1/1) ... [2022-07-22 17:37:58,384 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:58" (1/1) ... [2022-07-22 17:37:58,385 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-22 17:37:58,386 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-22 17:37:58,386 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-22 17:37:58,386 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-22 17:37:58,395 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:58" (1/1) ... [2022-07-22 17:37:58,406 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:37:58,414 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:37:58,423 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-22 17:37:58,441 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-22 17:37:58,458 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-22 17:37:58,458 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-22 17:37:58,458 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-22 17:37:58,458 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-22 17:37:58,458 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-22 17:37:58,458 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-22 17:37:58,458 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-22 17:37:58,459 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-22 17:37:58,459 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-22 17:37:58,459 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:37:58,459 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:37:58,459 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-22 17:37:58,459 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-22 17:37:58,460 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-22 17:37:58,460 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-22 17:37:58,460 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-22 17:37:58,460 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-22 17:37:58,460 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-22 17:37:58,460 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-22 17:37:58,460 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-22 17:37:58,528 INFO L234 CfgBuilder]: Building ICFG [2022-07-22 17:37:58,529 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-22 17:37:58,798 INFO L275 CfgBuilder]: Performing block encoding [2022-07-22 17:37:58,803 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-22 17:37:58,803 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-22 17:37:58,817 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:37:58 BoogieIcfgContainer [2022-07-22 17:37:58,817 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-22 17:37:58,818 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-22 17:37:58,818 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-22 17:37:58,821 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-22 17:37:58,821 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.07 05:37:57" (1/3) ... [2022-07-22 17:37:58,821 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3d53794c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:37:58, skipping insertion in model container [2022-07-22 17:37:58,821 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:37:58" (2/3) ... [2022-07-22 17:37:58,822 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3d53794c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:37:58, skipping insertion in model container [2022-07-22 17:37:58,822 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:37:58" (3/3) ... [2022-07-22 17:37:58,824 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product60.cil.c [2022-07-22 17:37:58,833 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-22 17:37:58,833 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-22 17:37:58,863 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-22 17:37:58,867 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@237240eb, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@271456dd [2022-07-22 17:37:58,867 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-22 17:37:58,870 INFO L276 IsEmpty]: Start isEmpty. Operand has 101 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 86 states have internal predecessors, (106), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-22 17:37:58,876 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-22 17:37:58,877 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:58,878 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:58,878 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:58,883 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:58,883 INFO L85 PathProgramCache]: Analyzing trace with hash 1691208954, now seen corresponding path program 1 times [2022-07-22 17:37:58,888 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:58,889 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [138204221] [2022-07-22 17:37:58,890 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:58,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:58,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-22 17:37:59,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,052 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:59,053 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:59,054 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [138204221] [2022-07-22 17:37:59,054 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [138204221] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:59,054 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:59,054 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-22 17:37:59,056 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [102602693] [2022-07-22 17:37:59,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:59,059 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-22 17:37:59,060 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:59,079 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-22 17:37:59,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:37:59,083 INFO L87 Difference]: Start difference. First operand has 101 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 86 states have internal predecessors, (106), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:59,126 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:59,126 INFO L93 Difference]: Finished difference Result 193 states and 262 transitions. [2022-07-22 17:37:59,127 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-22 17:37:59,128 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-22 17:37:59,128 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:59,134 INFO L225 Difference]: With dead ends: 193 [2022-07-22 17:37:59,134 INFO L226 Difference]: Without dead ends: 92 [2022-07-22 17:37:59,138 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:37:59,141 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:59,142 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:59,153 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-07-22 17:37:59,174 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2022-07-22 17:37:59,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 70 states have (on average 1.3142857142857143) internal successors, (92), 78 states have internal predecessors, (92), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-22 17:37:59,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 119 transitions. [2022-07-22 17:37:59,182 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 119 transitions. Word has length 25 [2022-07-22 17:37:59,183 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:59,183 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 119 transitions. [2022-07-22 17:37:59,184 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:59,184 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 119 transitions. [2022-07-22 17:37:59,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-22 17:37:59,186 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:59,186 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:59,186 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-22 17:37:59,187 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:59,189 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:59,189 INFO L85 PathProgramCache]: Analyzing trace with hash 356391721, now seen corresponding path program 1 times [2022-07-22 17:37:59,189 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:59,189 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1694566217] [2022-07-22 17:37:59,189 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:59,190 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:59,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-22 17:37:59,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,279 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:59,280 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:59,281 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1694566217] [2022-07-22 17:37:59,281 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1694566217] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:59,281 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:59,281 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 17:37:59,281 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1430313542] [2022-07-22 17:37:59,281 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:59,283 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:37:59,284 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:59,284 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:37:59,284 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:37:59,285 INFO L87 Difference]: Start difference. First operand 92 states and 119 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:59,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:59,312 INFO L93 Difference]: Finished difference Result 144 states and 186 transitions. [2022-07-22 17:37:59,313 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:37:59,313 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-22 17:37:59,314 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:59,315 INFO L225 Difference]: With dead ends: 144 [2022-07-22 17:37:59,316 INFO L226 Difference]: Without dead ends: 83 [2022-07-22 17:37:59,316 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:37:59,318 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 17 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:59,320 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 190 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:59,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-07-22 17:37:59,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 83. [2022-07-22 17:37:59,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 64 states have (on average 1.328125) internal successors, (85), 72 states have internal predecessors, (85), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-22 17:37:59,327 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 107 transitions. [2022-07-22 17:37:59,328 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 107 transitions. Word has length 26 [2022-07-22 17:37:59,328 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:59,328 INFO L495 AbstractCegarLoop]: Abstraction has 83 states and 107 transitions. [2022-07-22 17:37:59,328 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:59,328 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 107 transitions. [2022-07-22 17:37:59,331 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-07-22 17:37:59,332 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:59,332 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:59,332 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-22 17:37:59,333 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:59,333 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:59,333 INFO L85 PathProgramCache]: Analyzing trace with hash 1826063129, now seen corresponding path program 1 times [2022-07-22 17:37:59,333 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:59,334 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2040350669] [2022-07-22 17:37:59,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:59,334 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:59,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-22 17:37:59,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,406 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:59,406 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:59,406 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2040350669] [2022-07-22 17:37:59,407 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2040350669] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:59,407 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:59,407 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:37:59,407 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1210710708] [2022-07-22 17:37:59,407 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:59,408 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:37:59,408 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:59,408 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:37:59,408 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:37:59,408 INFO L87 Difference]: Start difference. First operand 83 states and 107 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:59,517 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:59,517 INFO L93 Difference]: Finished difference Result 201 states and 263 transitions. [2022-07-22 17:37:59,517 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-22 17:37:59,518 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-07-22 17:37:59,518 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:59,519 INFO L225 Difference]: With dead ends: 201 [2022-07-22 17:37:59,519 INFO L226 Difference]: Without dead ends: 126 [2022-07-22 17:37:59,520 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-22 17:37:59,520 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 172 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:59,521 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [172 Valid, 363 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:37:59,521 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2022-07-22 17:37:59,533 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 123. [2022-07-22 17:37:59,537 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 94 states have (on average 1.351063829787234) internal successors, (127), 105 states have internal predecessors, (127), 16 states have call successors, (16), 12 states have call predecessors, (16), 12 states have return successors, (17), 12 states have call predecessors, (17), 16 states have call successors, (17) [2022-07-22 17:37:59,538 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 160 transitions. [2022-07-22 17:37:59,538 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 160 transitions. Word has length 31 [2022-07-22 17:37:59,538 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:59,538 INFO L495 AbstractCegarLoop]: Abstraction has 123 states and 160 transitions. [2022-07-22 17:37:59,538 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:59,539 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 160 transitions. [2022-07-22 17:37:59,541 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-07-22 17:37:59,541 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:59,541 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:59,541 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-22 17:37:59,541 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:59,542 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:59,542 INFO L85 PathProgramCache]: Analyzing trace with hash 1496608149, now seen corresponding path program 1 times [2022-07-22 17:37:59,542 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:59,543 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1709500594] [2022-07-22 17:37:59,543 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:59,544 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:59,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:37:59,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,608 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:59,609 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:59,609 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1709500594] [2022-07-22 17:37:59,609 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1709500594] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:59,609 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:59,610 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:37:59,610 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [155535314] [2022-07-22 17:37:59,610 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:59,610 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:37:59,610 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:59,611 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:37:59,611 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:37:59,611 INFO L87 Difference]: Start difference. First operand 123 states and 160 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:59,704 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:37:59,704 INFO L93 Difference]: Finished difference Result 351 states and 467 transitions. [2022-07-22 17:37:59,705 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-22 17:37:59,705 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-07-22 17:37:59,705 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:37:59,709 INFO L225 Difference]: With dead ends: 351 [2022-07-22 17:37:59,709 INFO L226 Difference]: Without dead ends: 236 [2022-07-22 17:37:59,710 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-07-22 17:37:59,714 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 75 mSDsluCounter, 408 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 523 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:37:59,714 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 523 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:37:59,715 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 236 states. [2022-07-22 17:37:59,732 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 236 to 230. [2022-07-22 17:37:59,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 230 states, 173 states have (on average 1.3352601156069364) internal successors, (231), 194 states have internal predecessors, (231), 32 states have call successors, (32), 24 states have call predecessors, (32), 24 states have return successors, (36), 24 states have call predecessors, (36), 32 states have call successors, (36) [2022-07-22 17:37:59,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 299 transitions. [2022-07-22 17:37:59,734 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 299 transitions. Word has length 34 [2022-07-22 17:37:59,734 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:37:59,734 INFO L495 AbstractCegarLoop]: Abstraction has 230 states and 299 transitions. [2022-07-22 17:37:59,735 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:37:59,735 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 299 transitions. [2022-07-22 17:37:59,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-22 17:37:59,736 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:37:59,736 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:37:59,736 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-22 17:37:59,736 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:37:59,736 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:37:59,736 INFO L85 PathProgramCache]: Analyzing trace with hash 275228017, now seen corresponding path program 1 times [2022-07-22 17:37:59,737 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:37:59,737 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2068023022] [2022-07-22 17:37:59,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:37:59,737 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:37:59,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:37:59,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-22 17:37:59,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:37:59,800 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:37:59,800 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:37:59,800 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2068023022] [2022-07-22 17:37:59,801 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2068023022] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:37:59,801 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:37:59,801 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:37:59,801 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1412195142] [2022-07-22 17:37:59,801 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:37:59,801 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:37:59,801 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:37:59,801 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:37:59,802 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:37:59,802 INFO L87 Difference]: Start difference. First operand 230 states and 299 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-22 17:38:00,038 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:00,038 INFO L93 Difference]: Finished difference Result 532 states and 709 transitions. [2022-07-22 17:38:00,038 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-22 17:38:00,039 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-07-22 17:38:00,039 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:00,042 INFO L225 Difference]: With dead ends: 532 [2022-07-22 17:38:00,042 INFO L226 Difference]: Without dead ends: 310 [2022-07-22 17:38:00,043 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-22 17:38:00,046 INFO L413 NwaCegarLoop]: 99 mSDtfsCounter, 127 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 257 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 300 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 257 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:00,046 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [132 Valid, 210 Invalid, 300 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 257 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:38:00,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 310 states. [2022-07-22 17:38:00,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 310 to 299. [2022-07-22 17:38:00,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 299 states, 226 states have (on average 1.2743362831858407) internal successors, (288), 247 states have internal predecessors, (288), 38 states have call successors, (38), 34 states have call predecessors, (38), 34 states have return successors, (53), 36 states have call predecessors, (53), 38 states have call successors, (53) [2022-07-22 17:38:00,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 299 states to 299 states and 379 transitions. [2022-07-22 17:38:00,087 INFO L78 Accepts]: Start accepts. Automaton has 299 states and 379 transitions. Word has length 38 [2022-07-22 17:38:00,087 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:00,087 INFO L495 AbstractCegarLoop]: Abstraction has 299 states and 379 transitions. [2022-07-22 17:38:00,087 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-22 17:38:00,087 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 379 transitions. [2022-07-22 17:38:00,088 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-07-22 17:38:00,088 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:00,088 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:00,088 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-22 17:38:00,089 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:00,089 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:00,089 INFO L85 PathProgramCache]: Analyzing trace with hash -811009123, now seen corresponding path program 1 times [2022-07-22 17:38:00,089 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:00,089 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [227747473] [2022-07-22 17:38:00,089 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:00,089 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:00,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:38:00,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:38:00,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:00,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-07-22 17:38:00,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,157 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-22 17:38:00,158 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:00,158 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [227747473] [2022-07-22 17:38:00,158 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [227747473] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:00,158 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:00,158 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 17:38:00,158 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [484591128] [2022-07-22 17:38:00,159 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:00,159 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-22 17:38:00,159 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:00,159 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 17:38:00,160 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:38:00,160 INFO L87 Difference]: Start difference. First operand 299 states and 379 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:00,370 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:00,370 INFO L93 Difference]: Finished difference Result 649 states and 844 transitions. [2022-07-22 17:38:00,370 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 17:38:00,370 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2022-07-22 17:38:00,371 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:00,372 INFO L225 Difference]: With dead ends: 649 [2022-07-22 17:38:00,372 INFO L226 Difference]: Without dead ends: 358 [2022-07-22 17:38:00,373 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-22 17:38:00,387 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 140 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 307 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 229 SdHoareTripleChecker+Invalid, 359 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 307 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:00,388 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [141 Valid, 229 Invalid, 359 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 307 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:38:00,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 358 states. [2022-07-22 17:38:00,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 358 to 346. [2022-07-22 17:38:00,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 263 states have (on average 1.2509505703422052) internal successors, (329), 284 states have internal predecessors, (329), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (63), 44 states have call predecessors, (63), 42 states have call successors, (63) [2022-07-22 17:38:00,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 434 transitions. [2022-07-22 17:38:00,422 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 434 transitions. Word has length 57 [2022-07-22 17:38:00,422 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:00,422 INFO L495 AbstractCegarLoop]: Abstraction has 346 states and 434 transitions. [2022-07-22 17:38:00,422 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:00,423 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 434 transitions. [2022-07-22 17:38:00,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-22 17:38:00,424 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:00,424 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:00,424 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-22 17:38:00,424 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:00,424 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:00,424 INFO L85 PathProgramCache]: Analyzing trace with hash 2134035155, now seen corresponding path program 1 times [2022-07-22 17:38:00,424 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:00,424 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [821740412] [2022-07-22 17:38:00,425 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:00,425 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:00,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:38:00,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-22 17:38:00,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:00,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-22 17:38:00,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,487 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-22 17:38:00,487 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:00,487 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [821740412] [2022-07-22 17:38:00,488 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [821740412] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:00,488 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:00,488 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:38:00,488 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2057467663] [2022-07-22 17:38:00,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:00,488 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:38:00,488 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:00,488 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:38:00,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:38:00,489 INFO L87 Difference]: Start difference. First operand 346 states and 434 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:00,649 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:00,650 INFO L93 Difference]: Finished difference Result 690 states and 865 transitions. [2022-07-22 17:38:00,650 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-22 17:38:00,650 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2022-07-22 17:38:00,651 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:00,652 INFO L225 Difference]: With dead ends: 690 [2022-07-22 17:38:00,652 INFO L226 Difference]: Without dead ends: 352 [2022-07-22 17:38:00,653 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-22 17:38:00,653 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 163 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 163 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 212 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:00,654 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 222 Invalid, 212 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 163 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:00,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 352 states. [2022-07-22 17:38:00,664 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 352 to 346. [2022-07-22 17:38:00,664 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 263 states have (on average 1.2433460076045628) internal successors, (327), 284 states have internal predecessors, (327), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (59), 44 states have call predecessors, (59), 42 states have call successors, (59) [2022-07-22 17:38:00,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 428 transitions. [2022-07-22 17:38:00,666 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 428 transitions. Word has length 60 [2022-07-22 17:38:00,666 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:00,666 INFO L495 AbstractCegarLoop]: Abstraction has 346 states and 428 transitions. [2022-07-22 17:38:00,666 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:00,666 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 428 transitions. [2022-07-22 17:38:00,667 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-07-22 17:38:00,667 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:00,667 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:00,667 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-22 17:38:00,668 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:00,668 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:00,668 INFO L85 PathProgramCache]: Analyzing trace with hash 1112218911, now seen corresponding path program 1 times [2022-07-22 17:38:00,668 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:00,668 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1929364716] [2022-07-22 17:38:00,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:00,669 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:00,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:38:00,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:38:00,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:00,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-07-22 17:38:00,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:00,743 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-22 17:38:00,743 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:00,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1929364716] [2022-07-22 17:38:00,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1929364716] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:00,743 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:00,743 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-22 17:38:00,743 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [678514148] [2022-07-22 17:38:00,743 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:00,744 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-22 17:38:00,744 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:00,744 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-22 17:38:00,744 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-07-22 17:38:00,744 INFO L87 Difference]: Start difference. First operand 346 states and 428 transitions. Second operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 6 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:00,987 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:00,987 INFO L93 Difference]: Finished difference Result 708 states and 897 transitions. [2022-07-22 17:38:00,987 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-22 17:38:00,987 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 6 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2022-07-22 17:38:00,987 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:00,989 INFO L225 Difference]: With dead ends: 708 [2022-07-22 17:38:00,989 INFO L226 Difference]: Without dead ends: 370 [2022-07-22 17:38:00,990 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=42, Invalid=114, Unknown=0, NotChecked=0, Total=156 [2022-07-22 17:38:00,990 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 194 mSDsluCounter, 114 mSDsCounter, 0 mSdLazyCounter, 407 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 195 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 468 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 407 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:00,990 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [195 Valid, 205 Invalid, 468 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 407 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:38:00,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 370 states. [2022-07-22 17:38:01,000 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 370 to 350. [2022-07-22 17:38:01,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 350 states, 267 states have (on average 1.2397003745318351) internal successors, (331), 288 states have internal predecessors, (331), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (59), 44 states have call predecessors, (59), 42 states have call successors, (59) [2022-07-22 17:38:01,002 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 350 states to 350 states and 432 transitions. [2022-07-22 17:38:01,002 INFO L78 Accepts]: Start accepts. Automaton has 350 states and 432 transitions. Word has length 57 [2022-07-22 17:38:01,002 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:01,002 INFO L495 AbstractCegarLoop]: Abstraction has 350 states and 432 transitions. [2022-07-22 17:38:01,002 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 6 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:01,002 INFO L276 IsEmpty]: Start isEmpty. Operand 350 states and 432 transitions. [2022-07-22 17:38:01,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-07-22 17:38:01,003 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:01,003 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:01,003 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-22 17:38:01,003 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:01,004 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:01,004 INFO L85 PathProgramCache]: Analyzing trace with hash -1796544991, now seen corresponding path program 1 times [2022-07-22 17:38:01,004 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:01,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1245119670] [2022-07-22 17:38:01,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:01,004 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:01,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:38:01,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:38:01,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:01,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-07-22 17:38:01,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,064 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-22 17:38:01,065 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:01,065 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1245119670] [2022-07-22 17:38:01,065 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1245119670] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:01,065 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:01,065 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:38:01,065 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [256754268] [2022-07-22 17:38:01,065 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:01,065 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:38:01,065 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:01,066 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:38:01,066 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:38:01,066 INFO L87 Difference]: Start difference. First operand 350 states and 432 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-22 17:38:01,330 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:01,330 INFO L93 Difference]: Finished difference Result 1068 states and 1365 transitions. [2022-07-22 17:38:01,331 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-22 17:38:01,331 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2022-07-22 17:38:01,331 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:01,333 INFO L225 Difference]: With dead ends: 1068 [2022-07-22 17:38:01,333 INFO L226 Difference]: Without dead ends: 726 [2022-07-22 17:38:01,334 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-22 17:38:01,335 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 329 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 277 mSolverCounterSat, 126 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 332 SdHoareTripleChecker+Valid, 266 SdHoareTripleChecker+Invalid, 403 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 126 IncrementalHoareTripleChecker+Valid, 277 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:01,335 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [332 Valid, 266 Invalid, 403 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [126 Valid, 277 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:38:01,336 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 726 states. [2022-07-22 17:38:01,355 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 726 to 724. [2022-07-22 17:38:01,356 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 724 states, 549 states have (on average 1.2131147540983607) internal successors, (666), 586 states have internal predecessors, (666), 90 states have call successors, (90), 84 states have call predecessors, (90), 84 states have return successors, (138), 88 states have call predecessors, (138), 90 states have call successors, (138) [2022-07-22 17:38:01,358 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 724 states to 724 states and 894 transitions. [2022-07-22 17:38:01,358 INFO L78 Accepts]: Start accepts. Automaton has 724 states and 894 transitions. Word has length 57 [2022-07-22 17:38:01,359 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:01,359 INFO L495 AbstractCegarLoop]: Abstraction has 724 states and 894 transitions. [2022-07-22 17:38:01,359 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-22 17:38:01,359 INFO L276 IsEmpty]: Start isEmpty. Operand 724 states and 894 transitions. [2022-07-22 17:38:01,360 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-07-22 17:38:01,360 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:01,360 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:01,360 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-22 17:38:01,360 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:01,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:01,360 INFO L85 PathProgramCache]: Analyzing trace with hash 1429890759, now seen corresponding path program 1 times [2022-07-22 17:38:01,360 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:01,360 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [317985112] [2022-07-22 17:38:01,360 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:01,361 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:01,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:38:01,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-22 17:38:01,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-22 17:38:01,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:01,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-22 17:38:01,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,460 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-22 17:38:01,460 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:01,460 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [317985112] [2022-07-22 17:38:01,460 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [317985112] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:38:01,461 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1272801302] [2022-07-22 17:38:01,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:01,461 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:01,461 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:01,463 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:38:01,491 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-22 17:38:01,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:01,556 INFO L263 TraceCheckSpWp]: Trace formula consists of 387 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-22 17:38:01,560 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:38:01,689 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:01,690 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 17:38:01,690 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1272801302] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:01,690 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-22 17:38:01,690 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2022-07-22 17:38:01,690 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [342965304] [2022-07-22 17:38:01,690 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:01,690 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-22 17:38:01,691 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:01,691 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 17:38:01,691 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=264, Unknown=0, NotChecked=0, Total=306 [2022-07-22 17:38:01,691 INFO L87 Difference]: Start difference. First operand 724 states and 894 transitions. Second operand has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-22 17:38:01,816 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:01,817 INFO L93 Difference]: Finished difference Result 1418 states and 1757 transitions. [2022-07-22 17:38:01,817 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 17:38:01,817 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 61 [2022-07-22 17:38:01,818 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:01,820 INFO L225 Difference]: With dead ends: 1418 [2022-07-22 17:38:01,820 INFO L226 Difference]: Without dead ends: 702 [2022-07-22 17:38:01,822 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-07-22 17:38:01,822 INFO L413 NwaCegarLoop]: 192 mSDtfsCounter, 77 mSDsluCounter, 739 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 931 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:01,823 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 931 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:01,824 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 702 states. [2022-07-22 17:38:01,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 702 to 700. [2022-07-22 17:38:01,851 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 700 states, 530 states have (on average 1.1962264150943396) internal successors, (634), 566 states have internal predecessors, (634), 88 states have call successors, (88), 82 states have call predecessors, (88), 81 states have return successors, (121), 85 states have call predecessors, (121), 88 states have call successors, (121) [2022-07-22 17:38:01,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 700 states to 700 states and 843 transitions. [2022-07-22 17:38:01,853 INFO L78 Accepts]: Start accepts. Automaton has 700 states and 843 transitions. Word has length 61 [2022-07-22 17:38:01,853 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:01,853 INFO L495 AbstractCegarLoop]: Abstraction has 700 states and 843 transitions. [2022-07-22 17:38:01,854 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-22 17:38:01,854 INFO L276 IsEmpty]: Start isEmpty. Operand 700 states and 843 transitions. [2022-07-22 17:38:01,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-07-22 17:38:01,856 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:01,856 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:01,877 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-22 17:38:02,071 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-22 17:38:02,071 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:02,072 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:02,072 INFO L85 PathProgramCache]: Analyzing trace with hash 984940751, now seen corresponding path program 1 times [2022-07-22 17:38:02,072 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:02,072 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [59505441] [2022-07-22 17:38:02,072 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:02,072 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:02,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:38:02,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-22 17:38:02,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:38:02,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:02,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:38:02,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-07-22 17:38:02,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-07-22 17:38:02,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:02,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-07-22 17:38:02,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,170 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-07-22 17:38:02,170 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:02,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [59505441] [2022-07-22 17:38:02,170 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [59505441] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:38:02,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1085824627] [2022-07-22 17:38:02,170 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:02,170 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:02,170 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:02,171 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:38:02,172 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-22 17:38:02,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,295 INFO L263 TraceCheckSpWp]: Trace formula consists of 487 conjuncts, 7 conjunts are in the unsatisfiable core [2022-07-22 17:38:02,298 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:38:02,355 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-22 17:38:02,356 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 17:38:02,356 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1085824627] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:02,356 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-22 17:38:02,356 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-07-22 17:38:02,356 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [479208134] [2022-07-22 17:38:02,356 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:02,356 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:38:02,356 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:02,356 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:38:02,357 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:38:02,357 INFO L87 Difference]: Start difference. First operand 700 states and 843 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-22 17:38:02,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:02,388 INFO L93 Difference]: Finished difference Result 1020 states and 1246 transitions. [2022-07-22 17:38:02,388 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:38:02,388 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 100 [2022-07-22 17:38:02,388 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:02,392 INFO L225 Difference]: With dead ends: 1020 [2022-07-22 17:38:02,392 INFO L226 Difference]: Without dead ends: 1018 [2022-07-22 17:38:02,392 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:38:02,393 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 55 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:02,393 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 212 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:38:02,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1018 states. [2022-07-22 17:38:02,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1018 to 804. [2022-07-22 17:38:02,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 804 states, 611 states have (on average 1.2029459901800328) internal successors, (735), 651 states have internal predecessors, (735), 100 states have call successors, (100), 93 states have call predecessors, (100), 92 states have return successors, (147), 95 states have call predecessors, (147), 100 states have call successors, (147) [2022-07-22 17:38:02,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 804 states to 804 states and 982 transitions. [2022-07-22 17:38:02,423 INFO L78 Accepts]: Start accepts. Automaton has 804 states and 982 transitions. Word has length 100 [2022-07-22 17:38:02,424 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:02,424 INFO L495 AbstractCegarLoop]: Abstraction has 804 states and 982 transitions. [2022-07-22 17:38:02,424 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-22 17:38:02,425 INFO L276 IsEmpty]: Start isEmpty. Operand 804 states and 982 transitions. [2022-07-22 17:38:02,429 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-07-22 17:38:02,429 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:02,429 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:02,449 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-22 17:38:02,643 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-22 17:38:02,644 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:02,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:02,644 INFO L85 PathProgramCache]: Analyzing trace with hash 1042607335, now seen corresponding path program 1 times [2022-07-22 17:38:02,644 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:02,644 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1157009350] [2022-07-22 17:38:02,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:02,644 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:02,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,677 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:38:02,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-22 17:38:02,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:38:02,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:02,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:38:02,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-07-22 17:38:02,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-22 17:38:02,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-22 17:38:02,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:02,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:02,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-07-22 17:38:02,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:02,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-07-22 17:38:02,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,749 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 46 proven. 25 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-07-22 17:38:02,750 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:02,750 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1157009350] [2022-07-22 17:38:02,750 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1157009350] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:38:02,750 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1022095961] [2022-07-22 17:38:02,750 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:02,750 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:02,750 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:02,751 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:38:02,753 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-22 17:38:02,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:02,864 INFO L263 TraceCheckSpWp]: Trace formula consists of 595 conjuncts, 7 conjunts are in the unsatisfiable core [2022-07-22 17:38:02,876 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:38:02,962 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 68 proven. 28 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-07-22 17:38:02,963 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-22 17:38:03,142 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 48 proven. 24 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-07-22 17:38:03,143 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1022095961] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-22 17:38:03,143 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-22 17:38:03,143 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 12 [2022-07-22 17:38:03,143 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1623983652] [2022-07-22 17:38:03,143 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-22 17:38:03,144 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-07-22 17:38:03,144 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:03,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-07-22 17:38:03,144 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-22 17:38:03,144 INFO L87 Difference]: Start difference. First operand 804 states and 982 transitions. Second operand has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-07-22 17:38:03,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:03,790 INFO L93 Difference]: Finished difference Result 2111 states and 2713 transitions. [2022-07-22 17:38:03,790 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-07-22 17:38:03,791 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) Word has length 142 [2022-07-22 17:38:03,791 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:03,796 INFO L225 Difference]: With dead ends: 2111 [2022-07-22 17:38:03,796 INFO L226 Difference]: Without dead ends: 1471 [2022-07-22 17:38:03,798 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 343 GetRequests, 310 SyntacticMatches, 4 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 214 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=300, Invalid=630, Unknown=0, NotChecked=0, Total=930 [2022-07-22 17:38:03,798 INFO L413 NwaCegarLoop]: 145 mSDtfsCounter, 530 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 581 mSolverCounterSat, 276 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 533 SdHoareTripleChecker+Valid, 400 SdHoareTripleChecker+Invalid, 857 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 276 IncrementalHoareTripleChecker+Valid, 581 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:03,798 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [533 Valid, 400 Invalid, 857 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [276 Valid, 581 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-22 17:38:03,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1471 states. [2022-07-22 17:38:03,841 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1471 to 1280. [2022-07-22 17:38:03,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1280 states, 967 states have (on average 1.2099276111685626) internal successors, (1170), 1040 states have internal predecessors, (1170), 165 states have call successors, (165), 134 states have call predecessors, (165), 147 states have return successors, (277), 149 states have call predecessors, (277), 165 states have call successors, (277) [2022-07-22 17:38:03,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1280 states to 1280 states and 1612 transitions. [2022-07-22 17:38:03,846 INFO L78 Accepts]: Start accepts. Automaton has 1280 states and 1612 transitions. Word has length 142 [2022-07-22 17:38:03,846 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:03,847 INFO L495 AbstractCegarLoop]: Abstraction has 1280 states and 1612 transitions. [2022-07-22 17:38:03,847 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-07-22 17:38:03,847 INFO L276 IsEmpty]: Start isEmpty. Operand 1280 states and 1612 transitions. [2022-07-22 17:38:03,849 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-07-22 17:38:03,849 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:03,850 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:03,869 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-22 17:38:04,063 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:04,063 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:04,064 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:04,064 INFO L85 PathProgramCache]: Analyzing trace with hash -343596059, now seen corresponding path program 1 times [2022-07-22 17:38:04,064 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:04,064 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [998778426] [2022-07-22 17:38:04,064 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:04,064 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:04,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:38:04,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-22 17:38:04,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:38:04,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:04,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:38:04,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-07-22 17:38:04,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-22 17:38:04,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-22 17:38:04,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:04,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:04,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-07-22 17:38:04,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:04,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-07-22 17:38:04,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,183 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 59 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-07-22 17:38:04,184 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:04,184 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [998778426] [2022-07-22 17:38:04,184 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [998778426] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:38:04,184 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [533912146] [2022-07-22 17:38:04,184 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:04,184 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:04,184 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:04,185 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:38:04,187 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-07-22 17:38:04,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:04,282 INFO L263 TraceCheckSpWp]: Trace formula consists of 597 conjuncts, 11 conjunts are in the unsatisfiable core [2022-07-22 17:38:04,285 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:38:04,452 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 82 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-22 17:38:04,452 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-22 17:38:04,618 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 60 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-07-22 17:38:04,618 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [533912146] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-22 17:38:04,619 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-22 17:38:04,619 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 18 [2022-07-22 17:38:04,619 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1455730098] [2022-07-22 17:38:04,619 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-22 17:38:04,619 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-07-22 17:38:04,620 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:04,620 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-07-22 17:38:04,620 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=67, Invalid=239, Unknown=0, NotChecked=0, Total=306 [2022-07-22 17:38:04,620 INFO L87 Difference]: Start difference. First operand 1280 states and 1612 transitions. Second operand has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-07-22 17:38:06,091 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:06,091 INFO L93 Difference]: Finished difference Result 3607 states and 4794 transitions. [2022-07-22 17:38:06,092 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-07-22 17:38:06,092 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 142 [2022-07-22 17:38:06,092 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:06,101 INFO L225 Difference]: With dead ends: 3607 [2022-07-22 17:38:06,101 INFO L226 Difference]: Without dead ends: 2496 [2022-07-22 17:38:06,105 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 358 GetRequests, 304 SyntacticMatches, 5 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 604 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=628, Invalid=1922, Unknown=0, NotChecked=0, Total=2550 [2022-07-22 17:38:06,105 INFO L413 NwaCegarLoop]: 271 mSDtfsCounter, 940 mSDsluCounter, 503 mSDsCounter, 0 mSdLazyCounter, 1593 mSolverCounterSat, 533 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 945 SdHoareTripleChecker+Valid, 774 SdHoareTripleChecker+Invalid, 2126 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 533 IncrementalHoareTripleChecker+Valid, 1593 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:06,106 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [945 Valid, 774 Invalid, 2126 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [533 Valid, 1593 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-07-22 17:38:06,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2496 states. [2022-07-22 17:38:06,182 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2496 to 2091. [2022-07-22 17:38:06,185 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2091 states, 1575 states have (on average 1.2019047619047618) internal successors, (1893), 1677 states have internal predecessors, (1893), 274 states have call successors, (274), 234 states have call predecessors, (274), 241 states have return successors, (444), 241 states have call predecessors, (444), 274 states have call successors, (444) [2022-07-22 17:38:06,192 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2091 states to 2091 states and 2611 transitions. [2022-07-22 17:38:06,193 INFO L78 Accepts]: Start accepts. Automaton has 2091 states and 2611 transitions. Word has length 142 [2022-07-22 17:38:06,193 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:06,193 INFO L495 AbstractCegarLoop]: Abstraction has 2091 states and 2611 transitions. [2022-07-22 17:38:06,193 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-07-22 17:38:06,193 INFO L276 IsEmpty]: Start isEmpty. Operand 2091 states and 2611 transitions. [2022-07-22 17:38:06,197 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-07-22 17:38:06,198 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:06,198 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:06,215 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-07-22 17:38:06,411 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:06,411 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:06,412 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:06,412 INFO L85 PathProgramCache]: Analyzing trace with hash -1075563485, now seen corresponding path program 1 times [2022-07-22 17:38:06,412 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:06,412 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1109871273] [2022-07-22 17:38:06,412 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:06,412 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:06,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-22 17:38:06,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-22 17:38:06,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:38:06,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:06,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:38:06,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-07-22 17:38:06,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-22 17:38:06,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-22 17:38:06,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:06,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:06,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-07-22 17:38:06,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:06,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-07-22 17:38:06,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:06,501 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2022-07-22 17:38:06,502 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:06,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1109871273] [2022-07-22 17:38:06,502 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1109871273] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:06,502 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:06,502 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-07-22 17:38:06,502 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [338293221] [2022-07-22 17:38:06,502 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:06,503 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-07-22 17:38:06,503 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:06,503 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-07-22 17:38:06,503 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2022-07-22 17:38:06,504 INFO L87 Difference]: Start difference. First operand 2091 states and 2611 transitions. Second operand has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-22 17:38:06,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:06,875 INFO L93 Difference]: Finished difference Result 2704 states and 3326 transitions. [2022-07-22 17:38:06,876 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-07-22 17:38:06,876 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 142 [2022-07-22 17:38:06,876 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:06,877 INFO L225 Difference]: With dead ends: 2704 [2022-07-22 17:38:06,877 INFO L226 Difference]: Without dead ends: 0 [2022-07-22 17:38:06,882 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 44 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=80, Invalid=300, Unknown=0, NotChecked=0, Total=380 [2022-07-22 17:38:06,882 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 222 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 656 mSolverCounterSat, 80 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 223 SdHoareTripleChecker+Valid, 279 SdHoareTripleChecker+Invalid, 736 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 80 IncrementalHoareTripleChecker+Valid, 656 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:06,883 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [223 Valid, 279 Invalid, 736 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [80 Valid, 656 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-22 17:38:06,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-22 17:38:06,883 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-22 17:38:06,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 17:38:06,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-22 17:38:06,883 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 142 [2022-07-22 17:38:06,883 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:06,883 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-22 17:38:06,884 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-22 17:38:06,884 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-22 17:38:06,884 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-22 17:38:06,885 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-22 17:38:06,886 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-07-22 17:38:06,887 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-22 17:38:13,306 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 862 869) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2022-07-22 17:38:13,306 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 862 869) no Hoare annotation was computed. [2022-07-22 17:38:13,306 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 862 869) no Hoare annotation was computed. [2022-07-22 17:38:13,306 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 777 783) no Hoare annotation was computed. [2022-07-22 17:38:13,306 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 777 783) the Hoare annotation is: true [2022-07-22 17:38:13,306 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse3 (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse4) (or .cse0 .cse3 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) .cse4))) [2022-07-22 17:38:13,306 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2022-07-22 17:38:13,306 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2022-07-22 17:38:13,306 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2022-07-22 17:38:13,306 INFO L895 garLoopResultBuilder]: At program point L960(lines 945 963) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not .cse6)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse9 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse10 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse11 (let ((.cse14 (= ~waterLevel~0 0))) (or (and (not .cse14) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0)) (and (= |timeShift_isLowWaterLevel_~tmp~9#1| 1) .cse14)))) (.cse12 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse13 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse3 .cse5) (or .cse1 .cse3 .cse6 (and .cse7 .cse8 (= ~methAndRunningLastTime~0 0) .cse9 .cse10 .cse11 .cse12) .cse13) (or .cse0 .cse2 .cse4 .cse5) (or .cse4 (and .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) .cse6 .cse13)))) [2022-07-22 17:38:13,307 INFO L895 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not .cse5)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 (and .cse6 .cse7) .cse8) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse3 .cse9) (or .cse0 .cse2 .cse4 .cse9) (or (and .cse6 (= ~methAndRunningLastTime~0 0) .cse7) .cse1 .cse3 .cse5 .cse8)))) [2022-07-22 17:38:13,307 INFO L895 garLoopResultBuilder]: At program point L886(lines 881 889) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0))) (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse10 (not .cse1))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse0) (or .cse3 .cse4 (not (= |old(~waterLevel~0)| 1)) .cse6 (and .cse7 .cse8 .cse9 (= ~waterLevel~0 1))) (or .cse3 .cse5 .cse0 .cse10) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse7 .cse8 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse8) .cse6 .cse1 .cse2) (or .cse3 .cse4 .cse6 (and .cse11 .cse9) .cse2) (or .cse3 .cse5 .cse6 (and .cse7 .cse8 .cse11 .cse9) .cse10)))) [2022-07-22 17:38:13,307 INFO L899 garLoopResultBuilder]: For program point L1010(lines 1010 1016) no Hoare annotation was computed. [2022-07-22 17:38:13,307 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 753 776) no Hoare annotation was computed. [2022-07-22 17:38:13,307 INFO L895 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not .cse9)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse8 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse3 .cse5) (or .cse0 .cse2 .cse4 .cse5) (or .cse1 .cse3 (and .cse6 .cse7 (= ~methAndRunningLastTime~0 0) .cse8) .cse9 .cse10) (or .cse4 .cse9 (and .cse6 .cse7 .cse8) .cse10)))) [2022-07-22 17:38:13,308 INFO L895 garLoopResultBuilder]: At program point L825(line 825) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not .cse5)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse3 .cse7) (or .cse0 .cse2 .cse4 .cse7) (or .cse1 .cse3 .cse5 .cse6)))) [2022-07-22 17:38:13,308 INFO L895 garLoopResultBuilder]: At program point L821(line 821) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not .cse6)) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (let ((.cse9 (= ~waterLevel~0 0))) (or (and (not .cse9) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0)) (and (= |timeShift_isLowWaterLevel_~tmp~9#1| 1) .cse9))) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 .cse2 .cse3 .cse8) (or .cse0 .cse2 .cse5 .cse8) (or .cse4 .cse1 .cse3 .cse6 .cse7)))) [2022-07-22 17:38:13,308 INFO L895 garLoopResultBuilder]: At program point L1003(line 1003) the Hoare annotation is: (let ((.cse24 (= ~waterLevel~0 0))) (let ((.cse10 (= 0 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse19 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse17 (= ~methaneLevelCritical~0 0)) (.cse23 (not .cse24))) (let ((.cse18 (<= 2 ~waterLevel~0)) (.cse4 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse5 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse8 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse23) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) .cse24))) (.cse6 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse7 (or (and .cse23 (= |timeShift_isLowWaterLevel_~tmp~9#1| 0)) (and (= |timeShift_isLowWaterLevel_~tmp~9#1| 1) .cse24))) (.cse15 (not .cse17)) (.cse14 (not (<= 1 |old(~waterLevel~0)|))) (.cse16 (and .cse3 .cse19 .cse12)) (.cse20 (not .cse10)) (.cse13 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse3) .cse10 .cse11) (or (and .cse3 .cse12 (= ~waterLevel~0 1)) .cse13 .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse13 .cse0 .cse14 .cse15 .cse16 (and .cse17 .cse18 .cse19 .cse20)) (let ((.cse21 (let ((.cse22 (<= 1 ~waterLevel~0))) (or (and .cse9 .cse3 .cse17 .cse22 .cse6 .cse20) (and .cse2 .cse3 .cse17 .cse22 .cse6 .cse7 .cse20))))) (or (and .cse9 .cse21) (and .cse17 .cse18 .cse6 .cse20) .cse15 (and .cse21 .cse4 .cse5 .cse8) .cse10 .cse11)) (or .cse13 .cse14 .cse15 .cse16 .cse20) (or .cse13 .cse14 .cse1 .cse16 .cse20) (or .cse13 .cse0 .cse1 (and .cse19 .cse12) .cse11))))) [2022-07-22 17:38:13,308 INFO L899 garLoopResultBuilder]: For program point L1003-1(line 1003) no Hoare annotation was computed. [2022-07-22 17:38:13,308 INFO L899 garLoopResultBuilder]: For program point L165(line 165) no Hoare annotation was computed. [2022-07-22 17:38:13,308 INFO L895 garLoopResultBuilder]: At program point L830(line 830) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (not .cse3)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse11 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0)))) (and (or (and .cse0 .cse1 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8) (or .cse9 .cse2 .cse3 (and .cse10 .cse11) .cse4) (or .cse9 .cse7 (and .cse0 .cse1) .cse3 .cse4) (or .cse5 .cse9 .cse6 .cse7 .cse10) (or .cse5 .cse6 .cse2 .cse8) (or (and .cse1 .cse11 (= ~waterLevel~0 1)) .cse5 .cse9 (not (= |old(~waterLevel~0)| 1)) .cse2) (or (and .cse1 .cse11) .cse5 .cse9 .cse6 .cse7)))) [2022-07-22 17:38:13,308 INFO L895 garLoopResultBuilder]: At program point L830-1(lines 811 835) the Hoare annotation is: (let ((.cse23 (= ~waterLevel~0 0))) (let ((.cse10 (= 0 ~systemActive~0)) (.cse22 (not .cse23)) (.cse18 (= ~methaneLevelCritical~0 0))) (let ((.cse14 (not (<= 1 |old(~waterLevel~0)|))) (.cse19 (<= 2 ~waterLevel~0)) (.cse16 (not .cse18)) (.cse4 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse5 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse8 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse22) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) .cse23))) (.cse3 (= ~pumpRunning~0 0)) (.cse6 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse7 (or (and .cse22 (= |timeShift_isLowWaterLevel_~tmp~9#1| 0)) (and (= |timeShift_isLowWaterLevel_~tmp~9#1| 1) .cse23))) (.cse15 (not .cse10)) (.cse13 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse11 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse3) .cse10 .cse11) (or (and .cse3 .cse12 (= ~waterLevel~0 1)) .cse13 .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse13 .cse14 .cse1 .cse15) (or .cse13 .cse14 .cse16 .cse15) (or .cse13 .cse0 .cse14 .cse16 (and .cse3 .cse17 .cse12) (and .cse18 .cse19 .cse17 .cse15)) (let ((.cse20 (let ((.cse21 (<= 1 ~waterLevel~0))) (or (and .cse9 .cse3 .cse18 .cse21 .cse6 .cse15) (and .cse2 .cse3 .cse18 .cse21 .cse6 .cse7 .cse15))))) (or (and .cse9 .cse20) (and .cse18 .cse19 .cse6 .cse15) .cse16 (and .cse20 .cse4 .cse5 .cse8) .cse10 .cse11)) (or .cse13 .cse0 .cse1 (and .cse17 .cse12) .cse11))))) [2022-07-22 17:38:13,308 INFO L899 garLoopResultBuilder]: For program point L764-1(lines 764 770) no Hoare annotation was computed. [2022-07-22 17:38:13,308 INFO L899 garLoopResultBuilder]: For program point L954(lines 954 958) no Hoare annotation was computed. [2022-07-22 17:38:13,308 INFO L899 garLoopResultBuilder]: For program point L954-2(lines 954 958) no Hoare annotation was computed. [2022-07-22 17:38:13,308 INFO L895 garLoopResultBuilder]: At program point L166(lines 161 168) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not .cse5)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse3 .cse7) (or .cse0 .cse2 .cse4 .cse7) (or .cse1 .cse3 .cse5 .cse6)))) [2022-07-22 17:38:13,308 INFO L899 garLoopResultBuilder]: For program point L757-1(lines 756 775) no Hoare annotation was computed. [2022-07-22 17:38:13,309 INFO L899 garLoopResultBuilder]: For program point L819(lines 819 827) no Hoare annotation was computed. [2022-07-22 17:38:13,309 INFO L899 garLoopResultBuilder]: For program point L1009(lines 1009 1019) no Hoare annotation was computed. [2022-07-22 17:38:13,309 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 753 776) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= ~pumpRunning~0 0)) (.cse14 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse4 (and .cse12 .cse14 (= ~waterLevel~0 1))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse13 .cse14)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (<= 1 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and .cse12 .cse13 .cse14)) (.cse11 (not .cse2))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse4 .cse5 .cse6 .cse7 .cse1) (or .cse6 .cse8 .cse0 .cse2 .cse3) (or .cse5 .cse9 .cse1 .cse10 .cse11) (or .cse5 .cse9 .cse8 .cse10 .cse11)))) [2022-07-22 17:38:13,309 INFO L899 garLoopResultBuilder]: For program point L815(lines 815 832) no Hoare annotation was computed. [2022-07-22 17:38:13,309 INFO L899 garLoopResultBuilder]: For program point L1005(lines 1005 1022) no Hoare annotation was computed. [2022-07-22 17:38:13,309 INFO L895 garLoopResultBuilder]: At program point L1005-1(lines 997 1025) the Hoare annotation is: (let ((.cse25 (= ~waterLevel~0 0))) (let ((.cse17 (= 0 ~systemActive~0)) (.cse22 (= ~methaneLevelCritical~0 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse20 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~10#1| 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse24 (not .cse25))) (let ((.cse12 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse13 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse16 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse18 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse24) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) .cse25))) (.cse14 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse15 (or (and .cse24 (= |timeShift_isLowWaterLevel_~tmp~9#1| 0)) (and (= |timeShift_isLowWaterLevel_~tmp~9#1| 1) .cse25))) (.cse7 (and .cse1 .cse2 .cse20 .cse3)) (.cse8 (not .cse22)) (.cse21 (<= 2 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not .cse17))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5 .cse6) (or .cse0 .cse7 .cse4 .cse8 .cse6) (or (and .cse9 .cse1 .cse6) .cse10 .cse5 (and .cse11 .cse1 .cse2 .cse12 .cse13 .cse14 .cse15 .cse16 .cse6) .cse17 .cse18) (let ((.cse19 (let ((.cse23 (<= 1 ~waterLevel~0))) (or (and .cse9 .cse1 .cse2 .cse22 .cse20 .cse23 .cse14 .cse6) (and .cse11 .cse1 .cse2 .cse22 .cse20 .cse23 .cse14 .cse15 .cse6))))) (or (and .cse19 .cse12 .cse13 .cse16) (and .cse2 .cse20 .cse21 .cse14) (and .cse9 .cse19) .cse8 .cse17 .cse18)) (or .cse0 .cse10 .cse7 .cse4 .cse8 (and .cse21 .cse3)) (or .cse0 .cse10 .cse4 .cse5 (and .cse1 .cse2 .cse3 .cse6) .cse17))))) [2022-07-22 17:38:13,309 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 753 776) no Hoare annotation was computed. [2022-07-22 17:38:13,309 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 165) no Hoare annotation was computed. [2022-07-22 17:38:13,310 INFO L899 garLoopResultBuilder]: For program point L193(line 193) no Hoare annotation was computed. [2022-07-22 17:38:13,310 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 172 201) no Hoare annotation was computed. [2022-07-22 17:38:13,310 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 172 201) the Hoare annotation is: true [2022-07-22 17:38:13,310 INFO L899 garLoopResultBuilder]: For program point L186(lines 186 190) no Hoare annotation was computed. [2022-07-22 17:38:13,310 INFO L902 garLoopResultBuilder]: At program point L186-1(lines 186 190) the Hoare annotation is: true [2022-07-22 17:38:13,310 INFO L899 garLoopResultBuilder]: For program point L183(line 183) no Hoare annotation was computed. [2022-07-22 17:38:13,310 INFO L902 garLoopResultBuilder]: At program point L182-2(lines 182 196) the Hoare annotation is: true [2022-07-22 17:38:13,310 INFO L902 garLoopResultBuilder]: At program point L178(line 178) the Hoare annotation is: true [2022-07-22 17:38:13,310 INFO L899 garLoopResultBuilder]: For program point L178-1(line 178) no Hoare annotation was computed. [2022-07-22 17:38:13,310 INFO L902 garLoopResultBuilder]: At program point L197(lines 172 201) the Hoare annotation is: true [2022-07-22 17:38:13,310 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 96 104) the Hoare annotation is: true [2022-07-22 17:38:13,310 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 96 104) no Hoare annotation was computed. [2022-07-22 17:38:13,310 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2022-07-22 17:38:13,310 INFO L902 garLoopResultBuilder]: At program point L374(lines 311 378) the Hoare annotation is: true [2022-07-22 17:38:13,310 INFO L899 garLoopResultBuilder]: For program point L341(lines 341 347) no Hoare annotation was computed. [2022-07-22 17:38:13,311 INFO L899 garLoopResultBuilder]: For program point L341-1(lines 341 347) no Hoare annotation was computed. [2022-07-22 17:38:13,311 INFO L895 garLoopResultBuilder]: At program point L304(lines 299 307) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:13,311 INFO L895 garLoopResultBuilder]: At program point L333(line 333) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= 0 ~systemActive~0))) (and .cse6 .cse0 .cse7 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse5 (<= 1 ~waterLevel~0)) (and .cse6 .cse0 .cse7 .cse2 .cse3 .cse5 (= ~waterLevel~0 1)))) [2022-07-22 17:38:13,311 INFO L895 garLoopResultBuilder]: At program point L296(lines 292 298) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:13,311 INFO L895 garLoopResultBuilder]: At program point L994(lines 989 996) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:13,311 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-22 17:38:13,311 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-22 17:38:13,311 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-22 17:38:13,311 INFO L895 garLoopResultBuilder]: At program point L371(lines 320 372) the Hoare annotation is: false [2022-07-22 17:38:13,311 INFO L895 garLoopResultBuilder]: At program point L970(line 970) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-07-22 17:38:13,312 INFO L895 garLoopResultBuilder]: At program point L231(lines 227 233) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:13,312 INFO L899 garLoopResultBuilder]: For program point L359(lines 359 365) no Hoare annotation was computed. [2022-07-22 17:38:13,312 INFO L895 garLoopResultBuilder]: At program point L359-2(lines 351 366) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse9 (<= 2 ~waterLevel~0)) (.cse10 (not .cse6)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse9 .cse4 .cse10) (and .cse1 .cse2 .cse3 .cse9 .cse4 .cse10) (and .cse0 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6)))) [2022-07-22 17:38:13,312 INFO L899 garLoopResultBuilder]: For program point L260(lines 260 267) no Hoare annotation was computed. [2022-07-22 17:38:13,312 INFO L899 garLoopResultBuilder]: For program point L322(lines 321 370) no Hoare annotation was computed. [2022-07-22 17:38:13,312 INFO L899 garLoopResultBuilder]: For program point L260-2(lines 260 267) no Hoare annotation was computed. [2022-07-22 17:38:13,312 INFO L895 garLoopResultBuilder]: At program point L289(lines 285 291) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:13,312 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-22 17:38:13,312 INFO L899 garLoopResultBuilder]: For program point L351(lines 351 366) no Hoare annotation was computed. [2022-07-22 17:38:13,312 INFO L895 garLoopResultBuilder]: At program point L343(line 343) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= 0 ~systemActive~0))) (and .cse6 .cse0 .cse7 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse5 (<= 1 ~waterLevel~0)) (and .cse6 .cse0 .cse7 .cse2 .cse3 .cse5 (= ~waterLevel~0 1)))) [2022-07-22 17:38:13,312 INFO L902 garLoopResultBuilder]: At program point L244(lines 236 246) the Hoare annotation is: true [2022-07-22 17:38:13,313 INFO L895 garLoopResultBuilder]: At program point L368(lines 321 370) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (not (= 0 ~systemActive~0))) (and .cse6 .cse0 .cse7 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse5 (<= 1 ~waterLevel~0)) (and .cse6 .cse0 .cse7 .cse2 .cse3 .cse5 (= ~waterLevel~0 1)))) [2022-07-22 17:38:13,313 INFO L902 garLoopResultBuilder]: At program point L269(lines 250 272) the Hoare annotation is: true [2022-07-22 17:38:13,313 INFO L899 garLoopResultBuilder]: For program point L331(lines 331 337) no Hoare annotation was computed. [2022-07-22 17:38:13,313 INFO L899 garLoopResultBuilder]: For program point L331-1(lines 331 337) no Hoare annotation was computed. [2022-07-22 17:38:13,313 INFO L899 garLoopResultBuilder]: For program point L323(lines 323 327) no Hoare annotation was computed. [2022-07-22 17:38:13,313 INFO L895 garLoopResultBuilder]: At program point L984(lines 979 986) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse8 .cse0 .cse1 .cse2 .cse3 .cse5 (= ~waterLevel~0 1) .cse6) (and .cse8 .cse0 .cse7 .cse2 .cse3 .cse5 (<= 1 ~waterLevel~0) .cse6))) [2022-07-22 17:38:13,313 INFO L895 garLoopResultBuilder]: At program point L976(lines 964 978) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= 1 ~waterLevel~0)) (.cse5 (= 0 ~systemActive~0))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-07-22 17:38:13,313 INFO L899 garLoopResultBuilder]: For program point L968(lines 968 974) no Hoare annotation was computed. [2022-07-22 17:38:13,314 INFO L899 garLoopResultBuilder]: For program point L968-1(lines 968 974) no Hoare annotation was computed. [2022-07-22 17:38:13,314 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 785 809) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-07-22 17:38:13,314 INFO L895 garLoopResultBuilder]: At program point L799(line 799) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-07-22 17:38:13,314 INFO L899 garLoopResultBuilder]: For program point L793(lines 793 801) no Hoare annotation was computed. [2022-07-22 17:38:13,314 INFO L899 garLoopResultBuilder]: For program point L789(lines 789 806) no Hoare annotation was computed. [2022-07-22 17:38:13,314 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2022-07-22 17:38:13,314 INFO L895 garLoopResultBuilder]: At program point L841(lines 836 843) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-07-22 17:38:13,314 INFO L895 garLoopResultBuilder]: At program point L804(line 804) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-07-22 17:38:13,314 INFO L899 garLoopResultBuilder]: For program point L804-1(lines 785 809) no Hoare annotation was computed. [2022-07-22 17:38:13,315 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 785 809) no Hoare annotation was computed. [2022-07-22 17:38:13,315 INFO L899 garLoopResultBuilder]: For program point L852(lines 852 858) no Hoare annotation was computed. [2022-07-22 17:38:13,315 INFO L895 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and .cse5 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-07-22 17:38:13,315 INFO L895 garLoopResultBuilder]: At program point L852-2(lines 845 861) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 0) .cse2 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|)) (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-07-22 17:38:13,315 INFO L895 garLoopResultBuilder]: At program point L941(lines 926 944) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0)) .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-07-22 17:38:13,315 INFO L895 garLoopResultBuilder]: At program point L877(lines 870 880) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (<= 1 ~waterLevel~0)) (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse2) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse4 .cse3 .cse5) (or .cse0 (and .cse1 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|)) (not .cse2) .cse4 .cse3 .cse5))) [2022-07-22 17:38:13,315 INFO L895 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (<= 1 ~waterLevel~0)) (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse2) .cse3) (or .cse0 .cse1 (not .cse2) .cse4 .cse3 .cse5) (or (not (= ~waterLevel~0 1)) .cse0 .cse4 .cse3 .cse5))) [2022-07-22 17:38:13,315 INFO L899 garLoopResultBuilder]: For program point L875-1(line 875) no Hoare annotation was computed. [2022-07-22 17:38:13,316 INFO L899 garLoopResultBuilder]: For program point L935(lines 935 939) no Hoare annotation was computed. [2022-07-22 17:38:13,316 INFO L899 garLoopResultBuilder]: For program point L935-2(lines 935 939) no Hoare annotation was computed. [2022-07-22 17:38:13,316 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2022-07-22 17:38:13,316 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2022-07-22 17:38:13,316 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse3 (not (= ~pumpRunning~0 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (= 0 ~systemActive~0) .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2) (or .cse3 .cse4 .cse0 .cse1 .cse2))) [2022-07-22 17:38:13,318 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:13,319 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-22 17:38:13,346 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.07 05:38:13 BoogieIcfgContainer [2022-07-22 17:38:13,346 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-22 17:38:13,347 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-22 17:38:13,347 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-22 17:38:13,347 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-22 17:38:13,347 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:37:58" (3/4) ... [2022-07-22 17:38:13,349 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-22 17:38:13,353 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-22 17:38:13,353 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-22 17:38:13,353 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-22 17:38:13,353 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-22 17:38:13,353 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-22 17:38:13,353 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-22 17:38:13,354 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:38:13,354 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-22 17:38:13,359 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-07-22 17:38:13,366 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-22 17:38:13,367 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-22 17:38:13,367 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-22 17:38:13,367 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-22 17:38:13,368 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:13,368 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:13,387 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-22 17:38:13,388 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-22 17:38:13,388 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-22 17:38:13,388 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) [2022-07-22 17:38:13,390 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(methaneLevelCritical == 0) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-22 17:38:13,390 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || ((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((((pumpRunning == 0 && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)))) && ((((((pumpRunning == \old(pumpRunning) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive)))) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive))) && 1 <= \result) && 1 <= tmp) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (\old(waterLevel) == waterLevel && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(2 <= \old(waterLevel))) [2022-07-22 17:38:13,391 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((methAndRunningLastTime == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) [2022-07-22 17:38:13,392 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || ((((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive))) && 1 <= \result) && 1 <= tmp) && 1 <= tmp___0) || (((methAndRunningLastTime == 0 && tmp == 0) && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || (pumpRunning == \old(pumpRunning) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive))))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) [2022-07-22 17:38:13,392 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && methaneLevelCritical <= \result)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-07-22 17:38:13,392 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) [2022-07-22 17:38:13,392 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (\old(waterLevel) == waterLevel && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive)) [2022-07-22 17:38:13,392 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(methaneLevelCritical == 0) || 0 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) [2022-07-22 17:38:13,393 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-22 17:38:13,393 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-07-22 17:38:13,393 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-22 17:38:13,393 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(methaneLevelCritical == 0) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-22 17:38:13,393 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-22 17:38:13,393 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (((!(tmp == 0) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((((!(\old(pumpRunning) == 0) || (((!(tmp == 0) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-07-22 17:38:13,424 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-22 17:38:13,424 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-22 17:38:13,424 INFO L158 Benchmark]: Toolchain (without parser) took 15433.41ms. Allocated memory was 109.1MB in the beginning and 255.9MB in the end (delta: 146.8MB). Free memory was 85.6MB in the beginning and 109.8MB in the end (delta: -24.2MB). Peak memory consumption was 123.7MB. Max. memory is 16.1GB. [2022-07-22 17:38:13,424 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 83.9MB. Free memory was 58.3MB in the beginning and 58.3MB in the end (delta: 41.1kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 17:38:13,425 INFO L158 Benchmark]: CACSL2BoogieTranslator took 341.82ms. Allocated memory is still 109.1MB. Free memory was 85.4MB in the beginning and 66.0MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-07-22 17:38:13,425 INFO L158 Benchmark]: Boogie Procedure Inliner took 32.28ms. Allocated memory is still 109.1MB. Free memory was 66.0MB in the beginning and 63.4MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-22 17:38:13,425 INFO L158 Benchmark]: Boogie Preprocessor took 18.71ms. Allocated memory is still 109.1MB. Free memory was 63.4MB in the beginning and 61.9MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 17:38:13,426 INFO L158 Benchmark]: RCFGBuilder took 431.30ms. Allocated memory is still 109.1MB. Free memory was 61.9MB in the beginning and 71.3MB in the end (delta: -9.5MB). Peak memory consumption was 8.7MB. Max. memory is 16.1GB. [2022-07-22 17:38:13,426 INFO L158 Benchmark]: TraceAbstraction took 14528.39ms. Allocated memory was 109.1MB in the beginning and 255.9MB in the end (delta: 146.8MB). Free memory was 70.7MB in the beginning and 116.1MB in the end (delta: -45.4MB). Peak memory consumption was 144.3MB. Max. memory is 16.1GB. [2022-07-22 17:38:13,426 INFO L158 Benchmark]: Witness Printer took 77.04ms. Allocated memory is still 255.9MB. Free memory was 116.1MB in the beginning and 109.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-22 17:38:13,429 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 83.9MB. Free memory was 58.3MB in the beginning and 58.3MB in the end (delta: 41.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 341.82ms. Allocated memory is still 109.1MB. Free memory was 85.4MB in the beginning and 66.0MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 32.28ms. Allocated memory is still 109.1MB. Free memory was 66.0MB in the beginning and 63.4MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 18.71ms. Allocated memory is still 109.1MB. Free memory was 63.4MB in the beginning and 61.9MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 431.30ms. Allocated memory is still 109.1MB. Free memory was 61.9MB in the beginning and 71.3MB in the end (delta: -9.5MB). Peak memory consumption was 8.7MB. Max. memory is 16.1GB. * TraceAbstraction took 14528.39ms. Allocated memory was 109.1MB in the beginning and 255.9MB in the end (delta: 146.8MB). Free memory was 70.7MB in the beginning and 116.1MB in the end (delta: -45.4MB). Peak memory consumption was 144.3MB. Max. memory is 16.1GB. * Witness Printer took 77.04ms. Allocated memory is still 255.9MB. Free memory was 116.1MB in the beginning and 109.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 165]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 101 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 14.5s, OverallIterations: 14, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3073 SdHoareTripleChecker+Valid, 2.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3041 mSDsluCounter, 4932 SdHoareTripleChecker+Invalid, 2.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3102 mSDsCounter, 1251 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4446 IncrementalHoareTripleChecker+Invalid, 5697 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1251 mSolverCounterUnsat, 1830 mSDtfsCounter, 4446 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1082 GetRequests, 895 SyntacticMatches, 10 SemanticMatches, 177 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 905 ImplicationChecksByTransitivity, 1.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2091occurred in iteration=13, InterpolantAutomatonStates: 153, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 14 MinimizatonAttempts, 872 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 47 LocationsWithAnnotation, 3409 PreInvPairs, 3732 NumberOfFragments, 3872 HoareAnnotationTreeSize, 3409 FomulaSimplifications, 5143 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 47 FomulaSimplificationsInter, 31335 FormulaSimplificationTreeSizeReductionInter, 5.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.7s InterpolantComputationTime, 1417 NumberOfCodeBlocks, 1417 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1681 ConstructedInterpolants, 0 QuantifiedInterpolants, 3443 SizeOfPredicates, 9 NumberOfNonLiveVariables, 2066 ConjunctsInSsa, 33 ConjunctsInUnsatCore, 20 InterpolantComputations, 12 PerfectInterpolantSequences, 667/787 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && methaneLevelCritical <= \result)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 321]: Loop Invariant Derived loop invariant: ((((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) - InvariantResult [Line: 236]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 227]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 836]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 989]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 945]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(methaneLevelCritical == 0) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: (((((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (\old(waterLevel) == waterLevel && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive)) - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(methaneLevelCritical == 0) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (((!(tmp == 0) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((((!(\old(pumpRunning) == 0) || (((!(tmp == 0) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(methaneLevelCritical == 0) || 0 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 845]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 250]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 979]: Loop Invariant Derived loop invariant: ((((((((methAndRunningLastTime == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive))) || (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) - InvariantResult [Line: 964]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) - InvariantResult [Line: 997]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || ((((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive))) && 1 <= \result) && 1 <= tmp) && 1 <= tmp___0) || (((methAndRunningLastTime == 0 && tmp == 0) && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || (pumpRunning == \old(pumpRunning) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive))))) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || 0 == systemActive) - InvariantResult [Line: 311]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 811]: Loop Invariant Derived loop invariant: ((((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || ((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && 1 <= tmp___0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((((pumpRunning == 0 && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive)))) && ((((((pumpRunning == \old(pumpRunning) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive)))) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((((((\result == 0 && !(waterLevel == 0)) || (\result == 1 && waterLevel == 0)) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (tmp == 1 && waterLevel == 0))) && !(0 == systemActive))) && 1 <= \result) && 1 <= tmp) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (\old(waterLevel) == waterLevel && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-07-22 17:38:13,472 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE