./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 791161d1 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c8e3613a57f37f194f1fe75086d0eb5e0d997c2a9b69c99903e0a1a10a2db5eb --- Real Ultimate output --- This is Ultimate 0.2.2-?-791161d [2022-07-22 17:38:24,146 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-22 17:38:24,153 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-22 17:38:24,191 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-22 17:38:24,193 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-22 17:38:24,194 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-22 17:38:24,198 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-22 17:38:24,202 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-22 17:38:24,203 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-22 17:38:24,206 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-22 17:38:24,207 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-22 17:38:24,209 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-22 17:38:24,209 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-22 17:38:24,210 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-22 17:38:24,212 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-22 17:38:24,213 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-22 17:38:24,214 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-22 17:38:24,215 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-22 17:38:24,217 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-22 17:38:24,219 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-22 17:38:24,222 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-22 17:38:24,223 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-22 17:38:24,223 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-22 17:38:24,224 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-22 17:38:24,225 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-22 17:38:24,229 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-22 17:38:24,229 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-22 17:38:24,232 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-22 17:38:24,233 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-22 17:38:24,233 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-22 17:38:24,234 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-22 17:38:24,234 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-22 17:38:24,235 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-22 17:38:24,236 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-22 17:38:24,236 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-22 17:38:24,237 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-22 17:38:24,237 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-22 17:38:24,237 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-22 17:38:24,238 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-22 17:38:24,238 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-22 17:38:24,239 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-22 17:38:24,240 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-22 17:38:24,241 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-22 17:38:24,261 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-22 17:38:24,266 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-22 17:38:24,266 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-22 17:38:24,266 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-22 17:38:24,267 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-22 17:38:24,267 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-22 17:38:24,267 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-22 17:38:24,268 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-22 17:38:24,268 INFO L138 SettingsManager]: * Use SBE=true [2022-07-22 17:38:24,268 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-22 17:38:24,268 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-22 17:38:24,269 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-22 17:38:24,269 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-22 17:38:24,269 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-22 17:38:24,269 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-22 17:38:24,269 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-22 17:38:24,269 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-22 17:38:24,269 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-22 17:38:24,269 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-22 17:38:24,270 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-22 17:38:24,270 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-22 17:38:24,270 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-22 17:38:24,270 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-22 17:38:24,270 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-22 17:38:24,270 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:38:24,271 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-22 17:38:24,271 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-22 17:38:24,271 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-22 17:38:24,271 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-22 17:38:24,271 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-22 17:38:24,271 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-22 17:38:24,272 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-22 17:38:24,272 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-22 17:38:24,272 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c8e3613a57f37f194f1fe75086d0eb5e0d997c2a9b69c99903e0a1a10a2db5eb [2022-07-22 17:38:24,445 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-22 17:38:24,477 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-22 17:38:24,479 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-22 17:38:24,479 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-22 17:38:24,491 INFO L275 PluginConnector]: CDTParser initialized [2022-07-22 17:38:24,492 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c [2022-07-22 17:38:24,540 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/45022a2e6/87f7f0e59bf545cdaa9a73a0739aaf9f/FLAG17c88c297 [2022-07-22 17:38:24,933 INFO L306 CDTParser]: Found 1 translation units. [2022-07-22 17:38:24,934 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c [2022-07-22 17:38:24,954 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/45022a2e6/87f7f0e59bf545cdaa9a73a0739aaf9f/FLAG17c88c297 [2022-07-22 17:38:25,354 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/45022a2e6/87f7f0e59bf545cdaa9a73a0739aaf9f [2022-07-22 17:38:25,356 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-22 17:38:25,357 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-22 17:38:25,360 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-22 17:38:25,360 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-22 17:38:25,362 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-22 17:38:25,363 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,364 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@889325d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25, skipping insertion in model container [2022-07-22 17:38:25,365 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,370 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-22 17:38:25,409 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-22 17:38:25,607 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c[15422,15435] [2022-07-22 17:38:25,616 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:38:25,622 INFO L203 MainTranslator]: Completed pre-run [2022-07-22 17:38:25,655 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product38.cil.c[15422,15435] [2022-07-22 17:38:25,661 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:38:25,673 INFO L208 MainTranslator]: Completed translation [2022-07-22 17:38:25,673 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25 WrapperNode [2022-07-22 17:38:25,673 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-22 17:38:25,674 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-22 17:38:25,674 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-22 17:38:25,674 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-22 17:38:25,679 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,688 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,705 INFO L137 Inliner]: procedures = 54, calls = 155, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 254 [2022-07-22 17:38:25,705 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-22 17:38:25,706 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-22 17:38:25,706 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-22 17:38:25,706 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-22 17:38:25,712 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,712 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,724 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,727 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,731 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,742 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,744 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,746 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-22 17:38:25,748 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-22 17:38:25,748 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-22 17:38:25,748 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-22 17:38:25,749 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,754 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:38:25,762 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:25,812 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-22 17:38:25,845 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-22 17:38:25,870 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-22 17:38:25,870 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-22 17:38:25,871 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-22 17:38:25,871 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-22 17:38:25,871 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-22 17:38:25,871 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-22 17:38:25,871 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-22 17:38:25,871 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-22 17:38:25,871 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-22 17:38:25,872 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:38:25,872 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:38:25,872 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-22 17:38:25,872 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-22 17:38:25,872 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-22 17:38:25,872 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-22 17:38:25,872 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-22 17:38:25,872 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-22 17:38:25,873 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-22 17:38:25,932 INFO L234 CfgBuilder]: Building ICFG [2022-07-22 17:38:25,933 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-22 17:38:26,210 INFO L275 CfgBuilder]: Performing block encoding [2022-07-22 17:38:26,232 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-22 17:38:26,233 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-22 17:38:26,234 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:38:26 BoogieIcfgContainer [2022-07-22 17:38:26,234 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-22 17:38:26,236 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-22 17:38:26,236 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-22 17:38:26,238 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-22 17:38:26,239 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.07 05:38:25" (1/3) ... [2022-07-22 17:38:26,239 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@603d0bae and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:38:26, skipping insertion in model container [2022-07-22 17:38:26,239 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25" (2/3) ... [2022-07-22 17:38:26,240 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@603d0bae and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:38:26, skipping insertion in model container [2022-07-22 17:38:26,240 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:38:26" (3/3) ... [2022-07-22 17:38:26,241 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product38.cil.c [2022-07-22 17:38:26,263 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-22 17:38:26,263 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-22 17:38:26,312 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-22 17:38:26,318 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@6b1f77e6, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@4465cb87 [2022-07-22 17:38:26,319 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-22 17:38:26,322 INFO L276 IsEmpty]: Start isEmpty. Operand has 88 states, 67 states have (on average 1.3880597014925373) internal successors, (93), 75 states have internal predecessors, (93), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-07-22 17:38:26,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-22 17:38:26,330 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:26,331 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:26,331 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:26,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:26,337 INFO L85 PathProgramCache]: Analyzing trace with hash -1928340701, now seen corresponding path program 1 times [2022-07-22 17:38:26,343 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:26,343 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [64067188] [2022-07-22 17:38:26,343 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:26,344 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:26,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:26,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:38:26,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:26,546 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:26,547 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:26,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [64067188] [2022-07-22 17:38:26,547 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [64067188] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:26,548 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:26,548 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-22 17:38:26,549 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1443090233] [2022-07-22 17:38:26,550 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:26,554 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-22 17:38:26,554 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:26,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-22 17:38:26,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:38:26,580 INFO L87 Difference]: Start difference. First operand has 88 states, 67 states have (on average 1.3880597014925373) internal successors, (93), 75 states have internal predecessors, (93), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:26,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:26,617 INFO L93 Difference]: Finished difference Result 168 states and 229 transitions. [2022-07-22 17:38:26,618 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-22 17:38:26,619 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-22 17:38:26,620 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:26,626 INFO L225 Difference]: With dead ends: 168 [2022-07-22 17:38:26,627 INFO L226 Difference]: Without dead ends: 79 [2022-07-22 17:38:26,630 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:38:26,633 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:26,634 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:38:26,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-07-22 17:38:26,668 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 79. [2022-07-22 17:38:26,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 67 states have internal predecessors, (79), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-22 17:38:26,674 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 102 transitions. [2022-07-22 17:38:26,676 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 102 transitions. Word has length 25 [2022-07-22 17:38:26,676 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:26,677 INFO L495 AbstractCegarLoop]: Abstraction has 79 states and 102 transitions. [2022-07-22 17:38:26,677 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:26,677 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 102 transitions. [2022-07-22 17:38:26,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-22 17:38:26,681 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:26,681 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:26,681 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-22 17:38:26,682 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:26,682 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:26,683 INFO L85 PathProgramCache]: Analyzing trace with hash -2041135719, now seen corresponding path program 1 times [2022-07-22 17:38:26,683 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:26,683 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [328174903] [2022-07-22 17:38:26,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:26,684 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:26,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:26,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-22 17:38:26,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:26,778 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:26,780 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:26,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [328174903] [2022-07-22 17:38:26,781 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [328174903] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:26,781 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:26,781 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 17:38:26,781 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1677573236] [2022-07-22 17:38:26,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:26,783 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:38:26,783 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:26,784 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:38:26,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:38:26,785 INFO L87 Difference]: Start difference. First operand 79 states and 102 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:26,803 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:26,805 INFO L93 Difference]: Finished difference Result 123 states and 159 transitions. [2022-07-22 17:38:26,806 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:38:26,807 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-22 17:38:26,808 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:26,810 INFO L225 Difference]: With dead ends: 123 [2022-07-22 17:38:26,810 INFO L226 Difference]: Without dead ends: 70 [2022-07-22 17:38:26,812 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:38:26,814 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 13 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:26,815 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 161 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:38:26,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-07-22 17:38:26,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-07-22 17:38:26,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 54 states have (on average 1.3333333333333333) internal successors, (72), 61 states have internal predecessors, (72), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-07-22 17:38:26,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 90 transitions. [2022-07-22 17:38:26,821 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 90 transitions. Word has length 26 [2022-07-22 17:38:26,821 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:26,822 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 90 transitions. [2022-07-22 17:38:26,822 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:26,823 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 90 transitions. [2022-07-22 17:38:26,823 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-07-22 17:38:26,823 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:26,824 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:26,824 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-22 17:38:26,824 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:26,824 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:26,825 INFO L85 PathProgramCache]: Analyzing trace with hash 1999159483, now seen corresponding path program 1 times [2022-07-22 17:38:26,825 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:26,825 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1112506640] [2022-07-22 17:38:26,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:26,825 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:26,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:26,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:26,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:26,906 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:26,907 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:26,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1112506640] [2022-07-22 17:38:26,907 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1112506640] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:26,908 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:26,908 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:38:26,909 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1461095165] [2022-07-22 17:38:26,909 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:26,909 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:38:26,909 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:26,910 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:38:26,910 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:38:26,911 INFO L87 Difference]: Start difference. First operand 70 states and 90 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:27,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:27,020 INFO L93 Difference]: Finished difference Result 133 states and 174 transitions. [2022-07-22 17:38:27,021 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 17:38:27,021 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-07-22 17:38:27,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:27,022 INFO L225 Difference]: With dead ends: 133 [2022-07-22 17:38:27,022 INFO L226 Difference]: Without dead ends: 70 [2022-07-22 17:38:27,023 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-22 17:38:27,024 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 115 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:27,024 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [115 Valid, 185 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:27,024 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-07-22 17:38:27,028 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-07-22 17:38:27,043 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 54 states have (on average 1.3148148148148149) internal successors, (71), 61 states have internal predecessors, (71), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-07-22 17:38:27,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 89 transitions. [2022-07-22 17:38:27,044 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 89 transitions. Word has length 31 [2022-07-22 17:38:27,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:27,044 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 89 transitions. [2022-07-22 17:38:27,044 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:27,045 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 89 transitions. [2022-07-22 17:38:27,045 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-07-22 17:38:27,045 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:27,046 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:27,046 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-22 17:38:27,046 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:27,046 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:27,046 INFO L85 PathProgramCache]: Analyzing trace with hash 1128329484, now seen corresponding path program 1 times [2022-07-22 17:38:27,047 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:27,047 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [98202067] [2022-07-22 17:38:27,047 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:27,047 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:27,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:27,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:27,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-22 17:38:27,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,116 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:27,118 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:27,118 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [98202067] [2022-07-22 17:38:27,118 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [98202067] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:27,118 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:27,118 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:38:27,119 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [474235820] [2022-07-22 17:38:27,119 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:27,119 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:38:27,120 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:27,120 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:38:27,120 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:38:27,120 INFO L87 Difference]: Start difference. First operand 70 states and 89 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-22 17:38:27,286 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:27,286 INFO L93 Difference]: Finished difference Result 211 states and 269 transitions. [2022-07-22 17:38:27,286 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 17:38:27,286 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2022-07-22 17:38:27,287 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:27,288 INFO L225 Difference]: With dead ends: 211 [2022-07-22 17:38:27,288 INFO L226 Difference]: Without dead ends: 148 [2022-07-22 17:38:27,288 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-07-22 17:38:27,289 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 167 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 98 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 98 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:27,289 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 306 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 98 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:27,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 148 states. [2022-07-22 17:38:27,299 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 148 to 142. [2022-07-22 17:38:27,300 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 110 states have (on average 1.2727272727272727) internal successors, (140), 117 states have internal predecessors, (140), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-07-22 17:38:27,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 175 transitions. [2022-07-22 17:38:27,300 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 175 transitions. Word has length 41 [2022-07-22 17:38:27,301 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:27,301 INFO L495 AbstractCegarLoop]: Abstraction has 142 states and 175 transitions. [2022-07-22 17:38:27,301 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-22 17:38:27,301 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 175 transitions. [2022-07-22 17:38:27,302 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-07-22 17:38:27,302 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:27,302 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:27,302 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-22 17:38:27,302 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:27,302 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:27,302 INFO L85 PathProgramCache]: Analyzing trace with hash 1086887613, now seen corresponding path program 1 times [2022-07-22 17:38:27,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:27,303 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [649114489] [2022-07-22 17:38:27,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:27,303 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:27,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:27,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-22 17:38:27,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,348 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:27,348 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:27,348 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [649114489] [2022-07-22 17:38:27,348 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [649114489] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:27,348 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:27,349 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:38:27,349 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1362076299] [2022-07-22 17:38:27,349 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:27,349 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:38:27,349 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:27,350 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:38:27,350 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:38:27,350 INFO L87 Difference]: Start difference. First operand 142 states and 175 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-22 17:38:27,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:27,441 INFO L93 Difference]: Finished difference Result 285 states and 355 transitions. [2022-07-22 17:38:27,442 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 17:38:27,442 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-07-22 17:38:27,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:27,443 INFO L225 Difference]: With dead ends: 285 [2022-07-22 17:38:27,443 INFO L226 Difference]: Without dead ends: 150 [2022-07-22 17:38:27,444 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-22 17:38:27,445 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 59 mSDsluCounter, 276 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 369 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:27,445 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 369 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:27,446 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2022-07-22 17:38:27,453 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 145. [2022-07-22 17:38:27,454 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 145 states, 113 states have (on average 1.2654867256637168) internal successors, (143), 120 states have internal predecessors, (143), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-07-22 17:38:27,455 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 145 states to 145 states and 178 transitions. [2022-07-22 17:38:27,455 INFO L78 Accepts]: Start accepts. Automaton has 145 states and 178 transitions. Word has length 45 [2022-07-22 17:38:27,455 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:27,455 INFO L495 AbstractCegarLoop]: Abstraction has 145 states and 178 transitions. [2022-07-22 17:38:27,456 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-22 17:38:27,456 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 178 transitions. [2022-07-22 17:38:27,456 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-07-22 17:38:27,457 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:27,457 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:27,457 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-22 17:38:27,457 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:27,457 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:27,458 INFO L85 PathProgramCache]: Analyzing trace with hash 269239163, now seen corresponding path program 1 times [2022-07-22 17:38:27,458 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:27,458 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1282914763] [2022-07-22 17:38:27,458 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:27,458 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:27,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:27,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-22 17:38:27,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,503 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:27,503 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:27,503 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1282914763] [2022-07-22 17:38:27,503 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1282914763] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:27,503 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:27,503 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 17:38:27,504 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1470930447] [2022-07-22 17:38:27,504 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:27,504 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-22 17:38:27,504 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:27,505 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 17:38:27,505 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:38:27,505 INFO L87 Difference]: Start difference. First operand 145 states and 178 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-22 17:38:27,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:27,602 INFO L93 Difference]: Finished difference Result 293 states and 366 transitions. [2022-07-22 17:38:27,602 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 17:38:27,602 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-07-22 17:38:27,603 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:27,603 INFO L225 Difference]: With dead ends: 293 [2022-07-22 17:38:27,604 INFO L226 Difference]: Without dead ends: 155 [2022-07-22 17:38:27,604 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-07-22 17:38:27,605 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 95 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 407 SdHoareTripleChecker+Invalid, 166 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:27,605 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 407 Invalid, 166 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:27,606 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2022-07-22 17:38:27,622 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 147. [2022-07-22 17:38:27,622 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 147 states, 115 states have (on average 1.2608695652173914) internal successors, (145), 122 states have internal predecessors, (145), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-07-22 17:38:27,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 147 states to 147 states and 180 transitions. [2022-07-22 17:38:27,623 INFO L78 Accepts]: Start accepts. Automaton has 147 states and 180 transitions. Word has length 45 [2022-07-22 17:38:27,624 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:27,624 INFO L495 AbstractCegarLoop]: Abstraction has 147 states and 180 transitions. [2022-07-22 17:38:27,624 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-22 17:38:27,624 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states and 180 transitions. [2022-07-22 17:38:27,625 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-07-22 17:38:27,625 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:27,625 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:27,625 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-22 17:38:27,626 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:27,626 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:27,626 INFO L85 PathProgramCache]: Analyzing trace with hash 488093881, now seen corresponding path program 1 times [2022-07-22 17:38:27,626 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:27,626 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [903413652] [2022-07-22 17:38:27,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:27,627 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:27,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:27,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-22 17:38:27,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,676 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:27,676 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:27,676 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [903413652] [2022-07-22 17:38:27,676 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [903413652] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:27,676 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:27,677 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:38:27,677 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1535636314] [2022-07-22 17:38:27,677 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:27,677 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:38:27,677 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:27,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:38:27,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:38:27,678 INFO L87 Difference]: Start difference. First operand 147 states and 180 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-22 17:38:27,814 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:27,814 INFO L93 Difference]: Finished difference Result 414 states and 528 transitions. [2022-07-22 17:38:27,814 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 17:38:27,814 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-07-22 17:38:27,815 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:27,816 INFO L225 Difference]: With dead ends: 414 [2022-07-22 17:38:27,816 INFO L226 Difference]: Without dead ends: 274 [2022-07-22 17:38:27,817 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:38:27,817 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 201 mSDsluCounter, 163 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 208 SdHoareTripleChecker+Valid, 305 SdHoareTripleChecker+Invalid, 197 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:27,818 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [208 Valid, 305 Invalid, 197 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:27,818 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 274 states. [2022-07-22 17:38:27,831 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 274 to 266. [2022-07-22 17:38:27,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 206 states have (on average 1.2524271844660195) internal successors, (258), 217 states have internal predecessors, (258), 30 states have call successors, (30), 28 states have call predecessors, (30), 29 states have return successors, (45), 30 states have call predecessors, (45), 30 states have call successors, (45) [2022-07-22 17:38:27,832 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 333 transitions. [2022-07-22 17:38:27,832 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 333 transitions. Word has length 45 [2022-07-22 17:38:27,833 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:27,833 INFO L495 AbstractCegarLoop]: Abstraction has 266 states and 333 transitions. [2022-07-22 17:38:27,833 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-22 17:38:27,833 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 333 transitions. [2022-07-22 17:38:27,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-07-22 17:38:27,834 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:27,834 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:27,834 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-22 17:38:27,834 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:27,835 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:27,835 INFO L85 PathProgramCache]: Analyzing trace with hash -2000597692, now seen corresponding path program 1 times [2022-07-22 17:38:27,835 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:27,835 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [564149741] [2022-07-22 17:38:27,835 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:27,835 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:27,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:27,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:27,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-22 17:38:27,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,874 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:27,874 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:27,874 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [564149741] [2022-07-22 17:38:27,874 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [564149741] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:27,874 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:27,875 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:38:27,875 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [229685348] [2022-07-22 17:38:27,875 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:27,875 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:38:27,875 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:27,876 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:38:27,876 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:38:27,876 INFO L87 Difference]: Start difference. First operand 266 states and 333 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:27,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:27,979 INFO L93 Difference]: Finished difference Result 528 states and 661 transitions. [2022-07-22 17:38:27,980 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 17:38:27,980 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-07-22 17:38:27,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:27,981 INFO L225 Difference]: With dead ends: 528 [2022-07-22 17:38:27,981 INFO L226 Difference]: Without dead ends: 269 [2022-07-22 17:38:27,982 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-07-22 17:38:27,982 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 108 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 139 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 332 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 139 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:27,983 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [113 Valid, 332 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:27,983 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 269 states. [2022-07-22 17:38:27,993 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 269 to 264. [2022-07-22 17:38:27,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 204 states have (on average 1.2450980392156863) internal successors, (254), 215 states have internal predecessors, (254), 30 states have call successors, (30), 28 states have call predecessors, (30), 29 states have return successors, (45), 30 states have call predecessors, (45), 30 states have call successors, (45) [2022-07-22 17:38:27,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 329 transitions. [2022-07-22 17:38:27,994 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 329 transitions. Word has length 47 [2022-07-22 17:38:27,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:27,995 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 329 transitions. [2022-07-22 17:38:27,995 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:27,995 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 329 transitions. [2022-07-22 17:38:27,995 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-07-22 17:38:27,996 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:27,996 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:27,996 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-22 17:38:27,996 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:27,996 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:27,996 INFO L85 PathProgramCache]: Analyzing trace with hash 568530835, now seen corresponding path program 1 times [2022-07-22 17:38:27,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:27,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1882547785] [2022-07-22 17:38:27,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:27,997 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:28,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:28,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:38:28,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-22 17:38:28,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,056 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:28,056 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:28,056 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1882547785] [2022-07-22 17:38:28,057 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1882547785] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:28,057 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:28,057 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-22 17:38:28,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [816306639] [2022-07-22 17:38:28,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:28,057 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-22 17:38:28,058 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:28,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-22 17:38:28,058 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-07-22 17:38:28,058 INFO L87 Difference]: Start difference. First operand 264 states and 329 transitions. Second operand has 10 states, 10 states have (on average 4.2) internal successors, (42), 8 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:28,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:28,416 INFO L93 Difference]: Finished difference Result 534 states and 669 transitions. [2022-07-22 17:38:28,416 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-07-22 17:38:28,416 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 8 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2022-07-22 17:38:28,416 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:28,418 INFO L225 Difference]: With dead ends: 534 [2022-07-22 17:38:28,418 INFO L226 Difference]: Without dead ends: 324 [2022-07-22 17:38:28,419 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=128, Invalid=424, Unknown=0, NotChecked=0, Total=552 [2022-07-22 17:38:28,419 INFO L413 NwaCegarLoop]: 149 mSDtfsCounter, 289 mSDsluCounter, 526 mSDsCounter, 0 mSdLazyCounter, 448 mSolverCounterSat, 105 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 675 SdHoareTripleChecker+Invalid, 553 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 105 IncrementalHoareTripleChecker+Valid, 448 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:28,419 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 675 Invalid, 553 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [105 Valid, 448 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:38:28,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2022-07-22 17:38:28,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 299. [2022-07-22 17:38:28,430 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 299 states, 232 states have (on average 1.2241379310344827) internal successors, (284), 246 states have internal predecessors, (284), 34 states have call successors, (34), 28 states have call predecessors, (34), 32 states have return successors, (46), 34 states have call predecessors, (46), 34 states have call successors, (46) [2022-07-22 17:38:28,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 299 states to 299 states and 364 transitions. [2022-07-22 17:38:28,431 INFO L78 Accepts]: Start accepts. Automaton has 299 states and 364 transitions. Word has length 49 [2022-07-22 17:38:28,431 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:28,432 INFO L495 AbstractCegarLoop]: Abstraction has 299 states and 364 transitions. [2022-07-22 17:38:28,432 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.2) internal successors, (42), 8 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:28,432 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 364 transitions. [2022-07-22 17:38:28,433 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-07-22 17:38:28,433 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:28,434 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:28,434 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-22 17:38:28,434 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:28,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:28,434 INFO L85 PathProgramCache]: Analyzing trace with hash -2144109732, now seen corresponding path program 1 times [2022-07-22 17:38:28,434 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:28,435 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [877293276] [2022-07-22 17:38:28,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:28,435 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:28,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:28,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:38:28,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:28,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-22 17:38:28,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,495 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:28,495 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:28,495 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [877293276] [2022-07-22 17:38:28,496 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [877293276] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:28,496 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:28,496 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:38:28,496 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1326861587] [2022-07-22 17:38:28,496 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:28,496 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:38:28,496 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:28,497 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:38:28,497 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:38:28,497 INFO L87 Difference]: Start difference. First operand 299 states and 364 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:28,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:28,622 INFO L93 Difference]: Finished difference Result 543 states and 669 transitions. [2022-07-22 17:38:28,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-22 17:38:28,622 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-07-22 17:38:28,623 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:28,624 INFO L225 Difference]: With dead ends: 543 [2022-07-22 17:38:28,624 INFO L226 Difference]: Without dead ends: 300 [2022-07-22 17:38:28,625 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-07-22 17:38:28,625 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 132 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 158 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 198 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 158 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:28,625 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [135 Valid, 292 Invalid, 198 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 158 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:28,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 300 states. [2022-07-22 17:38:28,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 300 to 296. [2022-07-22 17:38:28,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 296 states, 229 states have (on average 1.222707423580786) internal successors, (280), 243 states have internal predecessors, (280), 34 states have call successors, (34), 28 states have call predecessors, (34), 32 states have return successors, (46), 34 states have call predecessors, (46), 34 states have call successors, (46) [2022-07-22 17:38:28,635 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 360 transitions. [2022-07-22 17:38:28,635 INFO L78 Accepts]: Start accepts. Automaton has 296 states and 360 transitions. Word has length 51 [2022-07-22 17:38:28,635 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:28,635 INFO L495 AbstractCegarLoop]: Abstraction has 296 states and 360 transitions. [2022-07-22 17:38:28,636 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:28,636 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 360 transitions. [2022-07-22 17:38:28,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-07-22 17:38:28,636 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:28,636 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:28,637 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-22 17:38:28,637 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:28,637 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:28,637 INFO L85 PathProgramCache]: Analyzing trace with hash -1925255014, now seen corresponding path program 1 times [2022-07-22 17:38:28,637 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:28,637 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1150782073] [2022-07-22 17:38:28,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:28,638 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:28,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:28,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:38:28,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:28,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-22 17:38:28,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,681 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:28,682 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:28,682 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1150782073] [2022-07-22 17:38:28,682 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1150782073] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:28,682 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:28,682 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 17:38:28,682 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [76013353] [2022-07-22 17:38:28,682 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:28,683 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-22 17:38:28,683 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:28,683 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 17:38:28,683 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:38:28,683 INFO L87 Difference]: Start difference. First operand 296 states and 360 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:28,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:28,843 INFO L93 Difference]: Finished difference Result 514 states and 631 transitions. [2022-07-22 17:38:28,843 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 17:38:28,843 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-07-22 17:38:28,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:28,844 INFO L225 Difference]: With dead ends: 514 [2022-07-22 17:38:28,845 INFO L226 Difference]: Without dead ends: 274 [2022-07-22 17:38:28,845 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-22 17:38:28,846 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 122 mSDsluCounter, 275 mSDsCounter, 0 mSdLazyCounter, 208 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 362 SdHoareTripleChecker+Invalid, 248 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 208 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:28,846 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 362 Invalid, 248 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 208 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:28,846 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 274 states. [2022-07-22 17:38:28,864 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 274 to 270. [2022-07-22 17:38:28,865 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 270 states, 210 states have (on average 1.2190476190476192) internal successors, (256), 223 states have internal predecessors, (256), 31 states have call successors, (31), 25 states have call predecessors, (31), 28 states have return successors, (39), 30 states have call predecessors, (39), 31 states have call successors, (39) [2022-07-22 17:38:28,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 270 states to 270 states and 326 transitions. [2022-07-22 17:38:28,866 INFO L78 Accepts]: Start accepts. Automaton has 270 states and 326 transitions. Word has length 51 [2022-07-22 17:38:28,866 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:28,867 INFO L495 AbstractCegarLoop]: Abstraction has 270 states and 326 transitions. [2022-07-22 17:38:28,867 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:28,867 INFO L276 IsEmpty]: Start isEmpty. Operand 270 states and 326 transitions. [2022-07-22 17:38:28,867 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-07-22 17:38:28,867 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:28,868 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:28,868 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-07-22 17:38:28,868 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:28,868 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:28,868 INFO L85 PathProgramCache]: Analyzing trace with hash 896506289, now seen corresponding path program 1 times [2022-07-22 17:38:28,869 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:28,869 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [591362953] [2022-07-22 17:38:28,869 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:28,869 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:28,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:28,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:28,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:38:28,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-22 17:38:28,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-07-22 17:38:28,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-07-22 17:38:28,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,930 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 18 proven. 4 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-07-22 17:38:28,930 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:28,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [591362953] [2022-07-22 17:38:28,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [591362953] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:38:28,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1306229247] [2022-07-22 17:38:28,930 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:28,931 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:28,931 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:28,932 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:38:28,945 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-22 17:38:29,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:29,008 INFO L263 TraceCheckSpWp]: Trace formula consists of 445 conjuncts, 13 conjunts are in the unsatisfiable core [2022-07-22 17:38:29,012 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:38:29,149 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-22 17:38:29,149 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-22 17:38:29,318 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-07-22 17:38:29,318 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1306229247] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-22 17:38:29,318 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-22 17:38:29,318 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 9] total 19 [2022-07-22 17:38:29,319 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1457559777] [2022-07-22 17:38:29,319 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-22 17:38:29,319 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2022-07-22 17:38:29,319 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:29,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2022-07-22 17:38:29,320 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=60, Invalid=282, Unknown=0, NotChecked=0, Total=342 [2022-07-22 17:38:29,320 INFO L87 Difference]: Start difference. First operand 270 states and 326 transitions. Second operand has 19 states, 19 states have (on average 6.7368421052631575) internal successors, (128), 14 states have internal predecessors, (128), 7 states have call successors, (20), 10 states have call predecessors, (20), 8 states have return successors, (18), 8 states have call predecessors, (18), 7 states have call successors, (18) [2022-07-22 17:38:30,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:30,348 INFO L93 Difference]: Finished difference Result 814 states and 1054 transitions. [2022-07-22 17:38:30,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-07-22 17:38:30,349 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 19 states have (on average 6.7368421052631575) internal successors, (128), 14 states have internal predecessors, (128), 7 states have call successors, (20), 10 states have call predecessors, (20), 8 states have return successors, (18), 8 states have call predecessors, (18), 7 states have call successors, (18) Word has length 83 [2022-07-22 17:38:30,349 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:30,349 INFO L225 Difference]: With dead ends: 814 [2022-07-22 17:38:30,350 INFO L226 Difference]: Without dead ends: 0 [2022-07-22 17:38:30,352 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 241 GetRequests, 173 SyntacticMatches, 1 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1195 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=927, Invalid=3765, Unknown=0, NotChecked=0, Total=4692 [2022-07-22 17:38:30,353 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 1040 mSDsluCounter, 642 mSDsCounter, 0 mSdLazyCounter, 1053 mSolverCounterSat, 506 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1040 SdHoareTripleChecker+Valid, 766 SdHoareTripleChecker+Invalid, 1559 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 506 IncrementalHoareTripleChecker+Valid, 1053 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:30,353 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1040 Valid, 766 Invalid, 1559 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [506 Valid, 1053 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-22 17:38:30,353 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-22 17:38:30,354 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-22 17:38:30,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 17:38:30,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-22 17:38:30,354 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 83 [2022-07-22 17:38:30,354 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:30,354 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-22 17:38:30,354 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 19 states have (on average 6.7368421052631575) internal successors, (128), 14 states have internal predecessors, (128), 7 states have call successors, (20), 10 states have call predecessors, (20), 8 states have return successors, (18), 8 states have call predecessors, (18), 7 states have call successors, (18) [2022-07-22 17:38:30,355 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-22 17:38:30,355 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-22 17:38:30,357 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-22 17:38:30,377 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-22 17:38:30,571 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-22 17:38:30,573 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-22 17:38:33,972 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 196 202) no Hoare annotation was computed. [2022-07-22 17:38:33,972 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 196 202) the Hoare annotation is: true [2022-07-22 17:38:33,973 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 853 864) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= |old(~methaneLevelCritical~0)| 0))) (let ((.cse0 (not .cse6)) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not .cse1)) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse2 .cse6 .cse7 .cse3 .cse4) (or .cse5 .cse2 .cse6 .cse7 .cse4)))) [2022-07-22 17:38:33,973 INFO L899 garLoopResultBuilder]: For program point L857-1(lines 853 864) no Hoare annotation was computed. [2022-07-22 17:38:33,973 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 853 864) no Hoare annotation was computed. [2022-07-22 17:38:33,973 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 865 873) the Hoare annotation is: true [2022-07-22 17:38:33,973 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 865 873) no Hoare annotation was computed. [2022-07-22 17:38:33,973 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 865 873) no Hoare annotation was computed. [2022-07-22 17:38:33,973 INFO L902 garLoopResultBuilder]: At program point L737(line 737) the Hoare annotation is: true [2022-07-22 17:38:33,973 INFO L899 garLoopResultBuilder]: For program point L737-1(line 737) no Hoare annotation was computed. [2022-07-22 17:38:33,973 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 731 760) no Hoare annotation was computed. [2022-07-22 17:38:33,973 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 731 760) the Hoare annotation is: true [2022-07-22 17:38:33,973 INFO L902 garLoopResultBuilder]: At program point L756(lines 731 760) the Hoare annotation is: true [2022-07-22 17:38:33,973 INFO L899 garLoopResultBuilder]: For program point L752(line 752) no Hoare annotation was computed. [2022-07-22 17:38:33,973 INFO L899 garLoopResultBuilder]: For program point L745(lines 745 749) no Hoare annotation was computed. [2022-07-22 17:38:33,973 INFO L902 garLoopResultBuilder]: At program point L745-1(lines 745 749) the Hoare annotation is: true [2022-07-22 17:38:33,974 INFO L899 garLoopResultBuilder]: For program point L742(line 742) no Hoare annotation was computed. [2022-07-22 17:38:33,974 INFO L902 garLoopResultBuilder]: At program point L741-2(lines 741 755) the Hoare annotation is: true [2022-07-22 17:38:33,974 INFO L895 garLoopResultBuilder]: At program point L287(lines 282 290) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2) (or .cse0 .cse1 .cse2 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2022-07-22 17:38:33,974 INFO L899 garLoopResultBuilder]: For program point L725(line 725) no Hoare annotation was computed. [2022-07-22 17:38:33,974 INFO L899 garLoopResultBuilder]: For program point L176-1(lines 175 194) no Hoare annotation was computed. [2022-07-22 17:38:33,974 INFO L899 garLoopResultBuilder]: For program point L238(lines 238 246) no Hoare annotation was computed. [2022-07-22 17:38:33,974 INFO L899 garLoopResultBuilder]: For program point L940(lines 940 946) no Hoare annotation was computed. [2022-07-22 17:38:33,974 INFO L899 garLoopResultBuilder]: For program point L234(lines 234 251) no Hoare annotation was computed. [2022-07-22 17:38:33,974 INFO L899 garLoopResultBuilder]: For program point L936(lines 936 949) no Hoare annotation was computed. [2022-07-22 17:38:33,974 INFO L895 garLoopResultBuilder]: At program point L936-1(lines 921 953) the Hoare annotation is: (let ((.cse12 (= 1 ~systemActive~0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|))) (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse12 .cse4 .cse5)) (.cse1 (not .cse12)) (.cse10 (and (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~2#1| 1) (<= |timeShift_getWaterLevel_#res#1| 1))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5) .cse6 .cse7) (let ((.cse8 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse2 .cse3 .cse8 .cse5) .cse1 .cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse8 .cse5) .cse6)) (or .cse0 .cse1 .cse10 .cse11 .cse6 .cse7) (or .cse1 .cse10 .cse9 .cse11 .cse6)))) [2022-07-22 17:38:33,974 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 172 195) no Hoare annotation was computed. [2022-07-22 17:38:33,974 INFO L899 garLoopResultBuilder]: For program point L833(lines 833 837) no Hoare annotation was computed. [2022-07-22 17:38:33,974 INFO L895 garLoopResultBuilder]: At program point L928(line 928) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse2 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse3 .cse1 .cse2) .cse4)) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse3 .cse1 .cse5) (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse5) .cse4)))) [2022-07-22 17:38:33,974 INFO L895 garLoopResultBuilder]: At program point L833-2(lines 829 840) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-22 17:38:33,974 INFO L899 garLoopResultBuilder]: For program point L928-1(line 928) no Hoare annotation was computed. [2022-07-22 17:38:33,975 INFO L895 garLoopResultBuilder]: At program point L726(lines 721 728) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-22 17:38:33,975 INFO L895 garLoopResultBuilder]: At program point L276(line 276) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-22 17:38:33,975 INFO L899 garLoopResultBuilder]: For program point L276-1(line 276) no Hoare annotation was computed. [2022-07-22 17:38:33,975 INFO L895 garLoopResultBuilder]: At program point L268(lines 263 270) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-22 17:38:33,975 INFO L895 garLoopResultBuilder]: At program point L244(line 244) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-22 17:38:33,975 INFO L899 garLoopResultBuilder]: For program point L930(lines 930 950) no Hoare annotation was computed. [2022-07-22 17:38:33,975 INFO L895 garLoopResultBuilder]: At program point L249(line 249) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1))) [2022-07-22 17:38:33,975 INFO L895 garLoopResultBuilder]: At program point L249-1(lines 230 254) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse2 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse3 .cse1 .cse2) .cse4)) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse3 .cse1 .cse5) (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse5) .cse4)))) [2022-07-22 17:38:33,975 INFO L895 garLoopResultBuilder]: At program point L278(lines 271 281) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-22 17:38:33,975 INFO L899 garLoopResultBuilder]: For program point L183-1(lines 183 189) no Hoare annotation was computed. [2022-07-22 17:38:33,975 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 172 195) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse1) .cse0 .cse2))) [2022-07-22 17:38:33,975 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 172 195) no Hoare annotation was computed. [2022-07-22 17:38:33,975 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 725) no Hoare annotation was computed. [2022-07-22 17:38:33,975 INFO L895 garLoopResultBuilder]: At program point L902(lines 897 905) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (<= ~waterLevel~0 1)) (.cse4 (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1|)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| 1))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= |timeShift_getWaterLevel_#res#1| 1)) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2 .cse1) (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 (and (<= 1 ~pumpRunning~0) .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4) (and .cse5 .cse6 .cse3 .cse4 .cse7) .cse8)) (or .cse2 .cse1 .cse9 .cse8) (let ((.cse10 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse10 .cse4 .cse7) .cse1 .cse9 .cse8 (and .cse5 .cse6 .cse10 .cse4 .cse7))))) [2022-07-22 17:38:33,976 INFO L902 garLoopResultBuilder]: At program point L799(lines 792 801) the Hoare annotation is: true [2022-07-22 17:38:33,976 INFO L895 garLoopResultBuilder]: At program point L151(lines 102 152) the Hoare annotation is: false [2022-07-22 17:38:33,976 INFO L899 garLoopResultBuilder]: For program point L812(lines 812 819) no Hoare annotation was computed. [2022-07-22 17:38:33,976 INFO L899 garLoopResultBuilder]: For program point L812-2(lines 812 819) no Hoare annotation was computed. [2022-07-22 17:38:33,976 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-22 17:38:33,976 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-22 17:38:33,976 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-22 17:38:33,976 INFO L899 garLoopResultBuilder]: For program point L123(lines 123 129) no Hoare annotation was computed. [2022-07-22 17:38:33,976 INFO L899 garLoopResultBuilder]: For program point L123-1(lines 123 129) no Hoare annotation was computed. [2022-07-22 17:38:33,976 INFO L902 garLoopResultBuilder]: At program point L821(lines 802 824) the Hoare annotation is: true [2022-07-22 17:38:33,976 INFO L895 garLoopResultBuilder]: At program point L148(lines 103 150) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1 .cse2 .cse3))) [2022-07-22 17:38:33,976 INFO L895 garLoopResultBuilder]: At program point L115(line 115) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1 .cse2 .cse3))) [2022-07-22 17:38:33,976 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-22 17:38:33,976 INFO L895 garLoopResultBuilder]: At program point L351(lines 346 353) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-07-22 17:38:33,976 INFO L895 garLoopResultBuilder]: At program point L789(lines 785 791) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0)) [2022-07-22 17:38:33,976 INFO L895 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-22 17:38:33,976 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 145) no Hoare annotation was computed. [2022-07-22 17:38:33,976 INFO L895 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-22 17:38:33,977 INFO L895 garLoopResultBuilder]: At program point L141-2(lines 133 146) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-07-22 17:38:33,977 INFO L899 garLoopResultBuilder]: For program point L104(lines 103 150) no Hoare annotation was computed. [2022-07-22 17:38:33,977 INFO L899 garLoopResultBuilder]: For program point L133(lines 133 146) no Hoare annotation was computed. [2022-07-22 17:38:33,977 INFO L895 garLoopResultBuilder]: At program point L125(line 125) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-07-22 17:38:33,977 INFO L902 garLoopResultBuilder]: At program point L154(lines 93 158) the Hoare annotation is: true [2022-07-22 17:38:33,977 INFO L899 garLoopResultBuilder]: For program point L113(lines 113 119) no Hoare annotation was computed. [2022-07-22 17:38:33,977 INFO L899 garLoopResultBuilder]: For program point L113-1(lines 113 119) no Hoare annotation was computed. [2022-07-22 17:38:33,977 INFO L899 garLoopResultBuilder]: For program point L105(lines 105 109) no Hoare annotation was computed. [2022-07-22 17:38:33,977 INFO L895 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-22 17:38:33,977 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 204 228) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))))) [2022-07-22 17:38:33,977 INFO L895 garLoopResultBuilder]: At program point L223(line 223) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-07-22 17:38:33,977 INFO L899 garLoopResultBuilder]: For program point L223-1(lines 204 228) no Hoare annotation was computed. [2022-07-22 17:38:33,977 INFO L895 garLoopResultBuilder]: At program point L915(lines 906 919) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (<= ~waterLevel~0 1))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (<= 2 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse1 .cse2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse2)))) [2022-07-22 17:38:33,977 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 204 228) no Hoare annotation was computed. [2022-07-22 17:38:33,977 INFO L895 garLoopResultBuilder]: At program point L218(line 218) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) .cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1)))) [2022-07-22 17:38:33,977 INFO L895 garLoopResultBuilder]: At program point L342(lines 327 345) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1)) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (not (<= ~waterLevel~0 2)) (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0) .cse2 (<= 2 ~waterLevel~0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))))) [2022-07-22 17:38:33,978 INFO L899 garLoopResultBuilder]: For program point L212(lines 212 220) no Hoare annotation was computed. [2022-07-22 17:38:33,978 INFO L899 garLoopResultBuilder]: For program point L208(lines 208 225) no Hoare annotation was computed. [2022-07-22 17:38:33,978 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 340) no Hoare annotation was computed. [2022-07-22 17:38:33,978 INFO L899 garLoopResultBuilder]: For program point L910(lines 910 916) no Hoare annotation was computed. [2022-07-22 17:38:33,978 INFO L899 garLoopResultBuilder]: For program point L336-2(lines 336 340) no Hoare annotation was computed. [2022-07-22 17:38:33,978 INFO L895 garLoopResultBuilder]: At program point L260(lines 255 262) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0) (<= 2 ~waterLevel~0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))))) [2022-07-22 17:38:33,978 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 841 852) no Hoare annotation was computed. [2022-07-22 17:38:33,978 INFO L899 garLoopResultBuilder]: For program point L845-1(lines 841 852) no Hoare annotation was computed. [2022-07-22 17:38:33,978 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 841 852) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1 (not (<= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2022-07-22 17:38:33,980 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:33,981 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-22 17:38:34,014 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.07 05:38:34 BoogieIcfgContainer [2022-07-22 17:38:34,014 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-22 17:38:34,014 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-22 17:38:34,014 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-22 17:38:34,014 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-22 17:38:34,015 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:38:26" (3/4) ... [2022-07-22 17:38:34,023 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-22 17:38:34,039 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-22 17:38:34,039 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-22 17:38:34,039 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-22 17:38:34,039 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-22 17:38:34,039 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-22 17:38:34,040 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:38:34,040 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-22 17:38:34,044 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-07-22 17:38:34,044 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-22 17:38:34,044 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-22 17:38:34,045 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-22 17:38:34,059 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-22 17:38:34,060 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:34,060 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:34,082 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-22 17:38:34,082 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive [2022-07-22 17:38:34,083 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= pumpRunning && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) [2022-07-22 17:38:34,083 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-07-22 17:38:34,083 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2022-07-22 17:38:34,084 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) || (((((1 <= pumpRunning && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) [2022-07-22 17:38:34,084 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) && (((((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp))) && ((((!(1 == systemActive) || (tmp___0 <= 1 && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) [2022-07-22 17:38:34,084 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-07-22 17:38:34,084 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((1 <= pumpRunning && methaneLevelCritical == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || ((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp) && \result <= 1)) || !(\old(waterLevel) <= 2))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) && \result <= 1)) [2022-07-22 17:38:34,085 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-07-22 17:38:34,085 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && \result == 0)) || !(waterLevel <= 2)) || ((1 <= \result && pumpRunning == 0) && waterLevel <= 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) [2022-07-22 17:38:34,085 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && !(\result == 0)) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) [2022-07-22 17:38:34,085 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp___0 == 0) && waterLevel <= 1) && \result == 0)) || !(waterLevel <= 2)) || (((((tmp == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) && \result == 0)) [2022-07-22 17:38:34,085 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || ((((((1 <= pumpRunning && tmp == 0) && 2 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) [2022-07-22 17:38:34,085 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-07-22 17:38:34,099 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-22 17:38:34,099 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-22 17:38:34,100 INFO L158 Benchmark]: Toolchain (without parser) took 8742.49ms. Allocated memory was 140.5MB in the beginning and 205.5MB in the end (delta: 65.0MB). Free memory was 104.8MB in the beginning and 128.2MB in the end (delta: -23.4MB). Peak memory consumption was 42.6MB. Max. memory is 16.1GB. [2022-07-22 17:38:34,100 INFO L158 Benchmark]: CDTParser took 0.10ms. Allocated memory is still 79.7MB. Free memory is still 36.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 17:38:34,100 INFO L158 Benchmark]: CACSL2BoogieTranslator took 313.69ms. Allocated memory is still 140.5MB. Free memory was 104.5MB in the beginning and 105.6MB in the end (delta: -1.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-07-22 17:38:34,101 INFO L158 Benchmark]: Boogie Procedure Inliner took 31.27ms. Allocated memory is still 140.5MB. Free memory was 105.6MB in the beginning and 102.6MB in the end (delta: 2.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-22 17:38:34,102 INFO L158 Benchmark]: Boogie Preprocessor took 41.13ms. Allocated memory is still 140.5MB. Free memory was 102.6MB in the beginning and 101.4MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 17:38:34,102 INFO L158 Benchmark]: RCFGBuilder took 486.93ms. Allocated memory is still 140.5MB. Free memory was 101.4MB in the beginning and 85.0MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-22 17:38:34,102 INFO L158 Benchmark]: TraceAbstraction took 7778.06ms. Allocated memory was 140.5MB in the beginning and 205.5MB in the end (delta: 65.0MB). Free memory was 83.8MB in the beginning and 133.5MB in the end (delta: -49.7MB). Peak memory consumption was 90.0MB. Max. memory is 16.1GB. [2022-07-22 17:38:34,102 INFO L158 Benchmark]: Witness Printer took 85.45ms. Allocated memory is still 205.5MB. Free memory was 133.5MB in the beginning and 128.2MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-22 17:38:34,103 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10ms. Allocated memory is still 79.7MB. Free memory is still 36.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 313.69ms. Allocated memory is still 140.5MB. Free memory was 104.5MB in the beginning and 105.6MB in the end (delta: -1.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 31.27ms. Allocated memory is still 140.5MB. Free memory was 105.6MB in the beginning and 102.6MB in the end (delta: 2.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 41.13ms. Allocated memory is still 140.5MB. Free memory was 102.6MB in the beginning and 101.4MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 486.93ms. Allocated memory is still 140.5MB. Free memory was 101.4MB in the beginning and 85.0MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 7778.06ms. Allocated memory was 140.5MB in the beginning and 205.5MB in the end (delta: 65.0MB). Free memory was 83.8MB in the beginning and 133.5MB in the end (delta: -49.7MB). Peak memory consumption was 90.0MB. Max. memory is 16.1GB. * Witness Printer took 85.45ms. Allocated memory is still 205.5MB. Free memory was 133.5MB in the beginning and 128.2MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 725]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 88 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.7s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2372 SdHoareTripleChecker+Valid, 1.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2341 mSDsluCounter, 4271 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2995 mSDsCounter, 865 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2548 IncrementalHoareTripleChecker+Invalid, 3413 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 865 mSolverCounterUnsat, 1276 mSDtfsCounter, 2548 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 404 GetRequests, 254 SyntacticMatches, 2 SemanticMatches, 148 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1282 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=299occurred in iteration=9, InterpolantAutomatonStates: 134, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 65 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 41 LocationsWithAnnotation, 1136 PreInvPairs, 1387 NumberOfFragments, 1402 HoareAnnotationTreeSize, 1136 FomulaSimplifications, 120 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 41 FomulaSimplificationsInter, 12449 FormulaSimplificationTreeSizeReductionInter, 3.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 622 NumberOfCodeBlocks, 622 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 691 ConstructedInterpolants, 0 QuantifiedInterpolants, 1363 SizeOfPredicates, 4 NumberOfNonLiveVariables, 445 ConjunctsInSsa, 13 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 61/81 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 346]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) || (((((1 <= pumpRunning && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) - InvariantResult [Line: 785]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 255]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || ((((((1 <= pumpRunning && tmp == 0) && 2 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) - InvariantResult [Line: 263]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 721]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 93]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 792]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 921]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) && (((((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp))) && ((((!(1 == systemActive) || (tmp___0 <= 1 && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((1 <= pumpRunning && methaneLevelCritical == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp)) || ((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp) && \result <= 1)) || !(\old(waterLevel) <= 2))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && methaneLevelCritical == tmp) && \result <= 1)) - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && !(\result == 0)) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && methaneLevelCritical == tmp))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 327]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp___0 == 0) && waterLevel <= 1) && \result == 0)) || !(waterLevel <= 2)) || (((((tmp == 0 && pumpRunning == 0) && 2 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) && \result == 0)) - InvariantResult [Line: 103]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 230]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && \result == 0)) || !(waterLevel <= 2)) || ((1 <= \result && pumpRunning == 0) && waterLevel <= 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 741]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 731]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-07-22 17:38:34,141 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE