./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 791161d1 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0cfed743c16ce3c8683c42b92f2e032d4ce7b489a9d3a5e140ec6101c472b3cb --- Real Ultimate output --- This is Ultimate 0.2.2-?-791161d [2022-07-22 17:38:25,033 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-22 17:38:25,035 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-22 17:38:25,071 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-22 17:38:25,071 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-22 17:38:25,072 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-22 17:38:25,074 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-22 17:38:25,076 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-22 17:38:25,077 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-22 17:38:25,081 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-22 17:38:25,081 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-22 17:38:25,083 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-22 17:38:25,083 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-22 17:38:25,085 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-22 17:38:25,086 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-22 17:38:25,088 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-22 17:38:25,088 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-22 17:38:25,089 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-22 17:38:25,090 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-22 17:38:25,095 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-22 17:38:25,097 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-22 17:38:25,098 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-22 17:38:25,098 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-22 17:38:25,099 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-22 17:38:25,100 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-22 17:38:25,105 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-22 17:38:25,106 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-22 17:38:25,106 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-22 17:38:25,107 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-22 17:38:25,108 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-22 17:38:25,108 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-22 17:38:25,109 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-22 17:38:25,110 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-22 17:38:25,110 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-22 17:38:25,111 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-22 17:38:25,111 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-22 17:38:25,111 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-22 17:38:25,112 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-22 17:38:25,112 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-22 17:38:25,112 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-22 17:38:25,113 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-22 17:38:25,114 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-22 17:38:25,115 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-22 17:38:25,143 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-22 17:38:25,144 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-22 17:38:25,144 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-22 17:38:25,144 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-22 17:38:25,144 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-22 17:38:25,145 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-22 17:38:25,145 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-22 17:38:25,145 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-22 17:38:25,145 INFO L138 SettingsManager]: * Use SBE=true [2022-07-22 17:38:25,146 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-22 17:38:25,146 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-22 17:38:25,146 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-22 17:38:25,146 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-22 17:38:25,146 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-22 17:38:25,147 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-22 17:38:25,147 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-22 17:38:25,147 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-22 17:38:25,147 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-22 17:38:25,147 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-22 17:38:25,148 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-22 17:38:25,148 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-22 17:38:25,148 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-22 17:38:25,148 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-22 17:38:25,149 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-22 17:38:25,149 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:38:25,149 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-22 17:38:25,149 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-22 17:38:25,149 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-22 17:38:25,149 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-22 17:38:25,149 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-22 17:38:25,150 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-22 17:38:25,150 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-22 17:38:25,150 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-22 17:38:25,150 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0cfed743c16ce3c8683c42b92f2e032d4ce7b489a9d3a5e140ec6101c472b3cb [2022-07-22 17:38:25,326 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-22 17:38:25,346 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-22 17:38:25,349 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-22 17:38:25,350 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-22 17:38:25,351 INFO L275 PluginConnector]: CDTParser initialized [2022-07-22 17:38:25,352 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c [2022-07-22 17:38:25,390 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1f32f9dd6/90908dccdbde4419b36ad39fe5618b39/FLAGe50901871 [2022-07-22 17:38:25,796 INFO L306 CDTParser]: Found 1 translation units. [2022-07-22 17:38:25,796 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c [2022-07-22 17:38:25,804 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1f32f9dd6/90908dccdbde4419b36ad39fe5618b39/FLAGe50901871 [2022-07-22 17:38:25,813 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1f32f9dd6/90908dccdbde4419b36ad39fe5618b39 [2022-07-22 17:38:25,814 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-22 17:38:25,815 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-22 17:38:25,817 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-22 17:38:25,817 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-22 17:38:25,819 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-22 17:38:25,821 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,822 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@770e7391 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:25, skipping insertion in model container [2022-07-22 17:38:25,822 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:38:25" (1/1) ... [2022-07-22 17:38:25,826 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-22 17:38:25,867 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-22 17:38:26,053 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c[17978,17991] [2022-07-22 17:38:26,055 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:38:26,061 INFO L203 MainTranslator]: Completed pre-run [2022-07-22 17:38:26,148 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c[17978,17991] [2022-07-22 17:38:26,152 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:38:26,165 INFO L208 MainTranslator]: Completed translation [2022-07-22 17:38:26,166 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:26 WrapperNode [2022-07-22 17:38:26,166 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-22 17:38:26,167 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-22 17:38:26,167 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-22 17:38:26,167 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-22 17:38:26,173 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:26" (1/1) ... [2022-07-22 17:38:26,198 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:26" (1/1) ... [2022-07-22 17:38:26,224 INFO L137 Inliner]: procedures = 53, calls = 152, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 246 [2022-07-22 17:38:26,224 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-22 17:38:26,225 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-22 17:38:26,225 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-22 17:38:26,225 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-22 17:38:26,231 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:26" (1/1) ... [2022-07-22 17:38:26,231 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:26" (1/1) ... [2022-07-22 17:38:26,239 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:26" (1/1) ... [2022-07-22 17:38:26,242 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:26" (1/1) ... [2022-07-22 17:38:26,246 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:26" (1/1) ... [2022-07-22 17:38:26,249 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:26" (1/1) ... [2022-07-22 17:38:26,250 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:26" (1/1) ... [2022-07-22 17:38:26,252 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-22 17:38:26,253 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-22 17:38:26,253 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-22 17:38:26,253 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-22 17:38:26,254 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:26" (1/1) ... [2022-07-22 17:38:26,259 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:38:26,269 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:26,279 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-22 17:38:26,281 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-22 17:38:26,303 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-22 17:38:26,304 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-22 17:38:26,304 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-22 17:38:26,304 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-22 17:38:26,304 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-22 17:38:26,304 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-22 17:38:26,304 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-22 17:38:26,304 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-22 17:38:26,304 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-22 17:38:26,305 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-22 17:38:26,305 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-22 17:38:26,305 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-22 17:38:26,305 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-22 17:38:26,305 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-22 17:38:26,305 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-22 17:38:26,305 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-22 17:38:26,367 INFO L234 CfgBuilder]: Building ICFG [2022-07-22 17:38:26,368 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-22 17:38:26,563 INFO L275 CfgBuilder]: Performing block encoding [2022-07-22 17:38:26,568 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-22 17:38:26,569 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-22 17:38:26,570 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:38:26 BoogieIcfgContainer [2022-07-22 17:38:26,570 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-22 17:38:26,571 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-22 17:38:26,572 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-22 17:38:26,574 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-22 17:38:26,574 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.07 05:38:25" (1/3) ... [2022-07-22 17:38:26,574 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@24787c0f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:38:26, skipping insertion in model container [2022-07-22 17:38:26,575 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:26" (2/3) ... [2022-07-22 17:38:26,575 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@24787c0f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:38:26, skipping insertion in model container [2022-07-22 17:38:26,575 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:38:26" (3/3) ... [2022-07-22 17:38:26,576 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product41.cil.c [2022-07-22 17:38:26,586 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-22 17:38:26,587 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-22 17:38:26,629 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-22 17:38:26,634 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@3319e33d, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@1ea69896 [2022-07-22 17:38:26,635 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-22 17:38:26,638 INFO L276 IsEmpty]: Start isEmpty. Operand has 81 states, 63 states have (on average 1.3968253968253967) internal successors, (88), 69 states have internal predecessors, (88), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2022-07-22 17:38:26,645 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-22 17:38:26,645 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:26,646 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:26,646 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:26,650 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:26,650 INFO L85 PathProgramCache]: Analyzing trace with hash -310918915, now seen corresponding path program 1 times [2022-07-22 17:38:26,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:26,657 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1078474980] [2022-07-22 17:38:26,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:26,657 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:26,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:26,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:38:26,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:26,883 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:26,884 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:26,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1078474980] [2022-07-22 17:38:26,884 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1078474980] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:26,884 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:26,885 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-22 17:38:26,886 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2087845120] [2022-07-22 17:38:26,887 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:26,890 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-22 17:38:26,891 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:26,910 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-22 17:38:26,912 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:38:26,914 INFO L87 Difference]: Start difference. First operand has 81 states, 63 states have (on average 1.3968253968253967) internal successors, (88), 69 states have internal predecessors, (88), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:26,935 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:26,935 INFO L93 Difference]: Finished difference Result 154 states and 211 transitions. [2022-07-22 17:38:26,936 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-22 17:38:26,937 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-22 17:38:26,937 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:26,943 INFO L225 Difference]: With dead ends: 154 [2022-07-22 17:38:26,943 INFO L226 Difference]: Without dead ends: 72 [2022-07-22 17:38:26,946 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:38:26,948 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:26,949 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:38:26,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2022-07-22 17:38:26,974 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 72. [2022-07-22 17:38:26,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 61 states have internal predecessors, (74), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-07-22 17:38:26,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 93 transitions. [2022-07-22 17:38:26,979 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 93 transitions. Word has length 25 [2022-07-22 17:38:26,980 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:26,980 INFO L495 AbstractCegarLoop]: Abstraction has 72 states and 93 transitions. [2022-07-22 17:38:26,980 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:26,981 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 93 transitions. [2022-07-22 17:38:26,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-22 17:38:26,984 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:26,984 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:26,985 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-22 17:38:26,985 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:26,987 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:26,987 INFO L85 PathProgramCache]: Analyzing trace with hash 1548949891, now seen corresponding path program 1 times [2022-07-22 17:38:26,987 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:26,987 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1281297662] [2022-07-22 17:38:26,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:26,988 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:27,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-22 17:38:27,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,089 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:27,090 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:27,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1281297662] [2022-07-22 17:38:27,090 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1281297662] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:27,090 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:27,090 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 17:38:27,091 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [91302034] [2022-07-22 17:38:27,091 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:27,092 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:38:27,092 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:27,092 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:38:27,093 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:38:27,093 INFO L87 Difference]: Start difference. First operand 72 states and 93 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:27,103 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:27,106 INFO L93 Difference]: Finished difference Result 110 states and 142 transitions. [2022-07-22 17:38:27,106 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:38:27,107 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-22 17:38:27,108 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:27,109 INFO L225 Difference]: With dead ends: 110 [2022-07-22 17:38:27,111 INFO L226 Difference]: Without dead ends: 63 [2022-07-22 17:38:27,112 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:38:27,114 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 12 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 144 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:27,115 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 144 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:38:27,116 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-07-22 17:38:27,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 63. [2022-07-22 17:38:27,124 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 50 states have (on average 1.34) internal successors, (67), 55 states have internal predecessors, (67), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-07-22 17:38:27,125 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 81 transitions. [2022-07-22 17:38:27,127 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 81 transitions. Word has length 26 [2022-07-22 17:38:27,128 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:27,128 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 81 transitions. [2022-07-22 17:38:27,129 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:27,130 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 81 transitions. [2022-07-22 17:38:27,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-07-22 17:38:27,131 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:27,131 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:27,131 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-22 17:38:27,131 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:27,132 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:27,132 INFO L85 PathProgramCache]: Analyzing trace with hash 1454917381, now seen corresponding path program 1 times [2022-07-22 17:38:27,132 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:27,133 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [238415366] [2022-07-22 17:38:27,133 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:27,133 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:27,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-22 17:38:27,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,207 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:27,208 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:27,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [238415366] [2022-07-22 17:38:27,209 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [238415366] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:27,209 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:27,209 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 17:38:27,209 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [895127385] [2022-07-22 17:38:27,209 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:27,210 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:38:27,210 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:27,210 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:38:27,210 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:38:27,213 INFO L87 Difference]: Start difference. First operand 63 states and 81 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:27,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:27,227 INFO L93 Difference]: Finished difference Result 119 states and 156 transitions. [2022-07-22 17:38:27,228 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:38:27,228 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-07-22 17:38:27,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:27,229 INFO L225 Difference]: With dead ends: 119 [2022-07-22 17:38:27,229 INFO L226 Difference]: Without dead ends: 63 [2022-07-22 17:38:27,230 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:38:27,231 INFO L413 NwaCegarLoop]: 79 mSDtfsCounter, 63 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 79 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:27,233 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 79 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:38:27,235 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-07-22 17:38:27,241 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 63. [2022-07-22 17:38:27,243 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 50 states have (on average 1.32) internal successors, (66), 55 states have internal predecessors, (66), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-07-22 17:38:27,245 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 80 transitions. [2022-07-22 17:38:27,246 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 80 transitions. Word has length 30 [2022-07-22 17:38:27,246 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:27,246 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 80 transitions. [2022-07-22 17:38:27,246 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:27,247 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 80 transitions. [2022-07-22 17:38:27,247 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-07-22 17:38:27,248 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:27,248 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:27,248 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-22 17:38:27,248 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:27,248 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:27,249 INFO L85 PathProgramCache]: Analyzing trace with hash -199527812, now seen corresponding path program 1 times [2022-07-22 17:38:27,249 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:27,249 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [146315904] [2022-07-22 17:38:27,249 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:27,249 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:27,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-22 17:38:27,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:38:27,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,298 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:27,298 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:27,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [146315904] [2022-07-22 17:38:27,298 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [146315904] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:27,299 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:27,299 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 17:38:27,299 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [278601606] [2022-07-22 17:38:27,299 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:27,299 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:38:27,300 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:27,300 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:38:27,300 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:38:27,300 INFO L87 Difference]: Start difference. First operand 63 states and 80 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-22 17:38:27,320 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:27,320 INFO L93 Difference]: Finished difference Result 160 states and 207 transitions. [2022-07-22 17:38:27,320 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:38:27,320 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 35 [2022-07-22 17:38:27,321 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:27,321 INFO L225 Difference]: With dead ends: 160 [2022-07-22 17:38:27,322 INFO L226 Difference]: Without dead ends: 104 [2022-07-22 17:38:27,322 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:38:27,323 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 54 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 147 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:27,323 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 147 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:38:27,324 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2022-07-22 17:38:27,331 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 102. [2022-07-22 17:38:27,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 80 states have (on average 1.3125) internal successors, (105), 87 states have internal predecessors, (105), 11 states have call successors, (11), 10 states have call predecessors, (11), 10 states have return successors, (13), 11 states have call predecessors, (13), 11 states have call successors, (13) [2022-07-22 17:38:27,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 129 transitions. [2022-07-22 17:38:27,333 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 129 transitions. Word has length 35 [2022-07-22 17:38:27,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:27,333 INFO L495 AbstractCegarLoop]: Abstraction has 102 states and 129 transitions. [2022-07-22 17:38:27,334 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-22 17:38:27,334 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 129 transitions. [2022-07-22 17:38:27,335 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-07-22 17:38:27,335 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:27,335 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:27,335 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-22 17:38:27,335 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:27,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:27,336 INFO L85 PathProgramCache]: Analyzing trace with hash -2013550284, now seen corresponding path program 1 times [2022-07-22 17:38:27,336 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:27,336 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1767056759] [2022-07-22 17:38:27,336 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:27,336 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:27,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 17:38:27,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-22 17:38:27,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,386 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:27,387 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:27,387 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1767056759] [2022-07-22 17:38:27,387 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1767056759] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:27,387 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:27,387 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:38:27,388 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [397503852] [2022-07-22 17:38:27,388 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:27,388 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:38:27,388 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:27,389 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:38:27,389 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:38:27,389 INFO L87 Difference]: Start difference. First operand 102 states and 129 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-22 17:38:27,432 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:27,432 INFO L93 Difference]: Finished difference Result 282 states and 373 transitions. [2022-07-22 17:38:27,433 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 17:38:27,433 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2022-07-22 17:38:27,433 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:27,435 INFO L225 Difference]: With dead ends: 282 [2022-07-22 17:38:27,435 INFO L226 Difference]: Without dead ends: 187 [2022-07-22 17:38:27,435 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:38:27,436 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 41 mSDsluCounter, 229 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 312 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:27,437 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 312 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:38:27,459 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187 states. [2022-07-22 17:38:27,470 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187 to 181. [2022-07-22 17:38:27,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 181 states, 142 states have (on average 1.2887323943661972) internal successors, (183), 152 states have internal predecessors, (183), 21 states have call successors, (21), 19 states have call predecessors, (21), 17 states have return successors, (27), 19 states have call predecessors, (27), 21 states have call successors, (27) [2022-07-22 17:38:27,473 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 181 states to 181 states and 231 transitions. [2022-07-22 17:38:27,473 INFO L78 Accepts]: Start accepts. Automaton has 181 states and 231 transitions. Word has length 41 [2022-07-22 17:38:27,473 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:27,473 INFO L495 AbstractCegarLoop]: Abstraction has 181 states and 231 transitions. [2022-07-22 17:38:27,474 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-22 17:38:27,474 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 231 transitions. [2022-07-22 17:38:27,475 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-07-22 17:38:27,475 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:27,475 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:27,475 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-22 17:38:27,475 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:27,476 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:27,476 INFO L85 PathProgramCache]: Analyzing trace with hash -583739890, now seen corresponding path program 1 times [2022-07-22 17:38:27,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:27,476 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [259135174] [2022-07-22 17:38:27,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:27,477 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:27,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:27,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-22 17:38:27,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-22 17:38:27,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,568 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:27,568 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:27,569 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [259135174] [2022-07-22 17:38:27,569 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [259135174] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:27,569 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:27,569 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:38:27,569 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1692103456] [2022-07-22 17:38:27,570 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:27,570 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:38:27,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:27,572 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:38:27,572 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:38:27,572 INFO L87 Difference]: Start difference. First operand 181 states and 231 transitions. Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:27,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:27,793 INFO L93 Difference]: Finished difference Result 461 states and 623 transitions. [2022-07-22 17:38:27,793 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 17:38:27,793 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 45 [2022-07-22 17:38:27,795 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:27,801 INFO L225 Difference]: With dead ends: 461 [2022-07-22 17:38:27,801 INFO L226 Difference]: Without dead ends: 366 [2022-07-22 17:38:27,802 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-07-22 17:38:27,807 INFO L413 NwaCegarLoop]: 79 mSDtfsCounter, 163 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 139 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 139 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:27,808 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 313 Invalid, 173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 139 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:27,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 366 states. [2022-07-22 17:38:27,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 366 to 342. [2022-07-22 17:38:27,848 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 342 states, 271 states have (on average 1.2767527675276753) internal successors, (346), 294 states have internal predecessors, (346), 39 states have call successors, (39), 27 states have call predecessors, (39), 31 states have return successors, (59), 37 states have call predecessors, (59), 39 states have call successors, (59) [2022-07-22 17:38:27,852 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 342 states to 342 states and 444 transitions. [2022-07-22 17:38:27,852 INFO L78 Accepts]: Start accepts. Automaton has 342 states and 444 transitions. Word has length 45 [2022-07-22 17:38:27,854 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:27,854 INFO L495 AbstractCegarLoop]: Abstraction has 342 states and 444 transitions. [2022-07-22 17:38:27,854 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:27,854 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 444 transitions. [2022-07-22 17:38:27,859 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-07-22 17:38:27,859 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:27,859 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:27,859 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-22 17:38:27,860 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:27,860 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:27,860 INFO L85 PathProgramCache]: Analyzing trace with hash -364885172, now seen corresponding path program 1 times [2022-07-22 17:38:27,860 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:27,860 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1926901674] [2022-07-22 17:38:27,861 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:27,861 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:27,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:27,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-22 17:38:27,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-22 17:38:27,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:27,918 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:27,919 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:27,919 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1926901674] [2022-07-22 17:38:27,919 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1926901674] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:27,919 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:27,919 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:38:27,919 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [205235486] [2022-07-22 17:38:27,920 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:27,920 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:38:27,920 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:27,921 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:38:27,921 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:38:27,921 INFO L87 Difference]: Start difference. First operand 342 states and 444 transitions. Second operand has 5 states, 5 states have (on average 7.6) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:28,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:28,038 INFO L93 Difference]: Finished difference Result 711 states and 938 transitions. [2022-07-22 17:38:28,038 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 17:38:28,038 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 45 [2022-07-22 17:38:28,038 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:28,040 INFO L225 Difference]: With dead ends: 711 [2022-07-22 17:38:28,040 INFO L226 Difference]: Without dead ends: 451 [2022-07-22 17:38:28,054 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-07-22 17:38:28,057 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 153 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 98 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 160 SdHoareTripleChecker+Valid, 360 SdHoareTripleChecker+Invalid, 131 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 98 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:28,058 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [160 Valid, 360 Invalid, 131 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 98 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:28,059 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 451 states. [2022-07-22 17:38:28,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 451 to 342. [2022-07-22 17:38:28,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 342 states, 271 states have (on average 1.2693726937269372) internal successors, (344), 294 states have internal predecessors, (344), 39 states have call successors, (39), 27 states have call predecessors, (39), 31 states have return successors, (59), 37 states have call predecessors, (59), 39 states have call successors, (59) [2022-07-22 17:38:28,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 342 states to 342 states and 442 transitions. [2022-07-22 17:38:28,086 INFO L78 Accepts]: Start accepts. Automaton has 342 states and 442 transitions. Word has length 45 [2022-07-22 17:38:28,086 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:28,086 INFO L495 AbstractCegarLoop]: Abstraction has 342 states and 442 transitions. [2022-07-22 17:38:28,086 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.6) internal successors, (38), 4 states have internal predecessors, (38), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:28,086 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 442 transitions. [2022-07-22 17:38:28,087 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-07-22 17:38:28,087 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:28,087 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:28,087 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-22 17:38:28,087 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:28,087 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:28,088 INFO L85 PathProgramCache]: Analyzing trace with hash -1182533622, now seen corresponding path program 1 times [2022-07-22 17:38:28,088 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:28,088 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1204811578] [2022-07-22 17:38:28,088 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:28,088 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:28,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:28,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-22 17:38:28,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-22 17:38:28,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,138 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:28,138 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:28,138 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1204811578] [2022-07-22 17:38:28,138 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1204811578] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:28,138 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:28,139 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 17:38:28,139 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1705586829] [2022-07-22 17:38:28,139 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:28,139 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-22 17:38:28,139 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:28,139 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 17:38:28,139 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:38:28,140 INFO L87 Difference]: Start difference. First operand 342 states and 442 transitions. Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:28,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:28,293 INFO L93 Difference]: Finished difference Result 829 states and 1093 transitions. [2022-07-22 17:38:28,293 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-22 17:38:28,293 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 45 [2022-07-22 17:38:28,293 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:28,295 INFO L225 Difference]: With dead ends: 829 [2022-07-22 17:38:28,295 INFO L226 Difference]: Without dead ends: 494 [2022-07-22 17:38:28,297 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=77, Invalid=163, Unknown=0, NotChecked=0, Total=240 [2022-07-22 17:38:28,297 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 314 mSDsluCounter, 269 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 321 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 175 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:28,297 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [321 Valid, 349 Invalid, 175 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:28,298 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 494 states. [2022-07-22 17:38:28,313 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 494 to 367. [2022-07-22 17:38:28,313 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 367 states, 295 states have (on average 1.2474576271186442) internal successors, (368), 316 states have internal predecessors, (368), 39 states have call successors, (39), 26 states have call predecessors, (39), 32 states have return successors, (63), 37 states have call predecessors, (63), 39 states have call successors, (63) [2022-07-22 17:38:28,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 367 states to 367 states and 470 transitions. [2022-07-22 17:38:28,315 INFO L78 Accepts]: Start accepts. Automaton has 367 states and 470 transitions. Word has length 45 [2022-07-22 17:38:28,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:28,315 INFO L495 AbstractCegarLoop]: Abstraction has 367 states and 470 transitions. [2022-07-22 17:38:28,316 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:28,316 INFO L276 IsEmpty]: Start isEmpty. Operand 367 states and 470 transitions. [2022-07-22 17:38:28,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-07-22 17:38:28,316 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:28,316 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:28,316 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-22 17:38:28,317 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:28,317 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:28,317 INFO L85 PathProgramCache]: Analyzing trace with hash 987986838, now seen corresponding path program 1 times [2022-07-22 17:38:28,317 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:28,317 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1364397358] [2022-07-22 17:38:28,317 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:28,317 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:28,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:28,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-22 17:38:28,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-07-22 17:38:28,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,388 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-22 17:38:28,388 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:28,388 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1364397358] [2022-07-22 17:38:28,388 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1364397358] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:38:28,389 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [368169685] [2022-07-22 17:38:28,389 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:28,389 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:28,389 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:28,391 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:38:28,395 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-22 17:38:28,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:28,483 INFO L263 TraceCheckSpWp]: Trace formula consists of 363 conjuncts, 15 conjunts are in the unsatisfiable core [2022-07-22 17:38:28,487 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:38:28,680 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:28,681 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 17:38:28,681 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [368169685] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:28,681 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-22 17:38:28,681 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [8] total 9 [2022-07-22 17:38:28,681 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1181339687] [2022-07-22 17:38:28,682 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:28,682 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-22 17:38:28,682 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:28,682 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 17:38:28,683 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2022-07-22 17:38:28,683 INFO L87 Difference]: Start difference. First operand 367 states and 470 transitions. Second operand has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:28,805 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:28,805 INFO L93 Difference]: Finished difference Result 1078 states and 1405 transitions. [2022-07-22 17:38:28,805 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-22 17:38:28,806 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2022-07-22 17:38:28,806 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:28,809 INFO L225 Difference]: With dead ends: 1078 [2022-07-22 17:38:28,810 INFO L226 Difference]: Without dead ends: 718 [2022-07-22 17:38:28,811 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 51 SyntacticMatches, 2 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=101, Unknown=0, NotChecked=0, Total=132 [2022-07-22 17:38:28,813 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 107 mSDsluCounter, 406 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 111 SdHoareTripleChecker+Valid, 493 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:28,813 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [111 Valid, 493 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:38:28,814 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 718 states. [2022-07-22 17:38:28,865 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 718 to 688. [2022-07-22 17:38:28,867 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 688 states, 551 states have (on average 1.2304900181488203) internal successors, (678), 586 states have internal predecessors, (678), 75 states have call successors, (75), 51 states have call predecessors, (75), 61 states have return successors, (125), 71 states have call predecessors, (125), 75 states have call successors, (125) [2022-07-22 17:38:28,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 688 states to 688 states and 878 transitions. [2022-07-22 17:38:28,872 INFO L78 Accepts]: Start accepts. Automaton has 688 states and 878 transitions. Word has length 50 [2022-07-22 17:38:28,873 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:28,873 INFO L495 AbstractCegarLoop]: Abstraction has 688 states and 878 transitions. [2022-07-22 17:38:28,873 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:28,873 INFO L276 IsEmpty]: Start isEmpty. Operand 688 states and 878 transitions. [2022-07-22 17:38:28,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-07-22 17:38:28,875 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:28,875 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:28,896 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-22 17:38:29,091 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:29,092 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:29,092 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:29,092 INFO L85 PathProgramCache]: Analyzing trace with hash -1869519007, now seen corresponding path program 1 times [2022-07-22 17:38:29,092 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:29,092 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1116799311] [2022-07-22 17:38:29,092 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:29,092 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:29,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:29,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:29,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:29,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-22 17:38:29,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:29,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-22 17:38:29,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:29,125 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-22 17:38:29,125 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:29,125 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1116799311] [2022-07-22 17:38:29,125 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1116799311] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:29,125 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:29,125 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:38:29,125 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1225837083] [2022-07-22 17:38:29,125 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:29,125 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:38:29,126 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:29,126 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:38:29,126 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:38:29,126 INFO L87 Difference]: Start difference. First operand 688 states and 878 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:29,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:29,258 INFO L93 Difference]: Finished difference Result 1271 states and 1632 transitions. [2022-07-22 17:38:29,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 17:38:29,258 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-07-22 17:38:29,259 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:29,260 INFO L225 Difference]: With dead ends: 1271 [2022-07-22 17:38:29,260 INFO L226 Difference]: Without dead ends: 250 [2022-07-22 17:38:29,262 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-07-22 17:38:29,263 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 119 mSDsluCounter, 280 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 124 SdHoareTripleChecker+Valid, 386 SdHoareTripleChecker+Invalid, 142 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:29,263 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [124 Valid, 386 Invalid, 142 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:29,263 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 250 states. [2022-07-22 17:38:29,272 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 250 to 242. [2022-07-22 17:38:29,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 192 states have (on average 1.1927083333333333) internal successors, (229), 203 states have internal predecessors, (229), 26 states have call successors, (26), 23 states have call predecessors, (26), 23 states have return successors, (31), 24 states have call predecessors, (31), 26 states have call successors, (31) [2022-07-22 17:38:29,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 286 transitions. [2022-07-22 17:38:29,274 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 286 transitions. Word has length 51 [2022-07-22 17:38:29,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:29,274 INFO L495 AbstractCegarLoop]: Abstraction has 242 states and 286 transitions. [2022-07-22 17:38:29,274 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-22 17:38:29,274 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 286 transitions. [2022-07-22 17:38:29,275 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-07-22 17:38:29,275 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:29,275 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:29,275 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-22 17:38:29,276 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:29,276 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:29,276 INFO L85 PathProgramCache]: Analyzing trace with hash -400361830, now seen corresponding path program 1 times [2022-07-22 17:38:29,276 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:29,276 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [48397238] [2022-07-22 17:38:29,276 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:29,277 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:29,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:29,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:29,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:29,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-22 17:38:29,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:29,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-07-22 17:38:29,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:29,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-07-22 17:38:29,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:29,373 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-22 17:38:29,373 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:29,374 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [48397238] [2022-07-22 17:38:29,374 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [48397238] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:29,374 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:29,374 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-07-22 17:38:29,374 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [729795522] [2022-07-22 17:38:29,374 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:29,375 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-07-22 17:38:29,375 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:29,375 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-07-22 17:38:29,375 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=90, Unknown=0, NotChecked=0, Total=110 [2022-07-22 17:38:29,375 INFO L87 Difference]: Start difference. First operand 242 states and 286 transitions. Second operand has 11 states, 11 states have (on average 4.090909090909091) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:29,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:29,686 INFO L93 Difference]: Finished difference Result 473 states and 564 transitions. [2022-07-22 17:38:29,686 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-07-22 17:38:29,686 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 4.090909090909091) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-07-22 17:38:29,687 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:29,687 INFO L225 Difference]: With dead ends: 473 [2022-07-22 17:38:29,687 INFO L226 Difference]: Without dead ends: 0 [2022-07-22 17:38:29,688 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 65 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=141, Invalid=365, Unknown=0, NotChecked=0, Total=506 [2022-07-22 17:38:29,688 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 195 mSDsluCounter, 240 mSDsCounter, 0 mSdLazyCounter, 354 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 198 SdHoareTripleChecker+Valid, 326 SdHoareTripleChecker+Invalid, 420 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 354 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:29,688 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [198 Valid, 326 Invalid, 420 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 354 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:38:29,689 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-22 17:38:29,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-22 17:38:29,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 17:38:29,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-22 17:38:29,689 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 54 [2022-07-22 17:38:29,689 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:29,689 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-22 17:38:29,689 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 4.090909090909091) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:29,689 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-22 17:38:29,689 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-22 17:38:29,691 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-22 17:38:29,692 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-07-22 17:38:29,693 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-22 17:38:33,196 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 125 131) no Hoare annotation was computed. [2022-07-22 17:38:33,196 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 125 131) the Hoare annotation is: true [2022-07-22 17:38:33,196 INFO L899 garLoopResultBuilder]: For program point L402-1(lines 398 409) no Hoare annotation was computed. [2022-07-22 17:38:33,196 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 398 409) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~methaneLevelCritical~0)| 0))) (.cse3 (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= 0 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 (= ~methaneLevelCritical~0 1) (not (= |old(~methaneLevelCritical~0)| 1))) (or .cse1 (not (= ~pumpRunning~0 1)) .cse2 .cse3 .cse4))) [2022-07-22 17:38:33,196 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 398 409) no Hoare annotation was computed. [2022-07-22 17:38:33,197 INFO L899 garLoopResultBuilder]: For program point L481(lines 481 485) no Hoare annotation was computed. [2022-07-22 17:38:33,197 INFO L902 garLoopResultBuilder]: At program point L481-1(lines 481 485) the Hoare annotation is: true [2022-07-22 17:38:33,197 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 467 496) no Hoare annotation was computed. [2022-07-22 17:38:33,197 INFO L899 garLoopResultBuilder]: For program point L478(line 478) no Hoare annotation was computed. [2022-07-22 17:38:33,197 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 467 496) the Hoare annotation is: true [2022-07-22 17:38:33,197 INFO L902 garLoopResultBuilder]: At program point L477-2(lines 477 491) the Hoare annotation is: true [2022-07-22 17:38:33,197 INFO L902 garLoopResultBuilder]: At program point L473(line 473) the Hoare annotation is: true [2022-07-22 17:38:33,197 INFO L899 garLoopResultBuilder]: For program point L473-1(line 473) no Hoare annotation was computed. [2022-07-22 17:38:33,198 INFO L902 garLoopResultBuilder]: At program point L492(lines 467 496) the Hoare annotation is: true [2022-07-22 17:38:33,198 INFO L899 garLoopResultBuilder]: For program point L488(line 488) no Hoare annotation was computed. [2022-07-22 17:38:33,198 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 410 418) the Hoare annotation is: true [2022-07-22 17:38:33,198 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 410 418) no Hoare annotation was computed. [2022-07-22 17:38:33,198 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 410 418) no Hoare annotation was computed. [2022-07-22 17:38:33,198 INFO L899 garLoopResultBuilder]: For program point L353(lines 353 366) no Hoare annotation was computed. [2022-07-22 17:38:33,198 INFO L895 garLoopResultBuilder]: At program point L353-1(lines 338 370) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0))) (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse9 (= ~pumpRunning~0 0)) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse4)) (.cse3 (<= ~waterLevel~0 1)) (.cse5 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse6 (<= |timeShift_activatePump_~tmp~1#1| 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (< 0 (+ |timeShift_activatePump_~tmp~1#1| 1))) (.cse2 (= ~pumpRunning~0 1))) (and (or .cse0 .cse1 .cse2) (let ((.cse10 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1| 0))) (.cse12 (= |timeShift_isHighWaterLevel_~tmp~2#1| 0)) (.cse13 (not (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0))) (.cse14 (= |timeShift_isHighWaterSensorDry_#res#1| 0)) (.cse15 (not (= |timeShift_isHighWaterLevel_#res#1| 0)))) (or (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse2) (and .cse9 .cse10 .cse3 .cse4 .cse7) .cse11 .cse0 (and .cse9 .cse10 .cse12 .cse5 .cse13 .cse14 .cse7 .cse15) (not (= ~methaneLevelCritical~0 1)) (and .cse12 .cse5 .cse13 .cse6 .cse14 .cse7 .cse8 .cse15 .cse2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse3 .cse1) (or (and .cse9 .cse3 .cse4 .cse7) .cse11 .cse0 (and .cse3 .cse4 .cse5 (<= |timeShift_isMethaneAlarm_#res#1| 0) .cse6 .cse7 .cse8 (<= 0 |timeShift_isMethaneAlarm_#res#1|) .cse2) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)))))) [2022-07-22 17:38:33,198 INFO L899 garLoopResultBuilder]: For program point L378(lines 378 382) no Hoare annotation was computed. [2022-07-22 17:38:33,198 INFO L895 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (let ((.cse6 (= 1 ~systemActive~0)) (.cse15 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (and .cse15 .cse5 .cse9)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (<= |timeShift_activatePump_~tmp~1#1| 0)) (.cse10 (< 0 (+ |timeShift_activatePump_~tmp~1#1| 1))) (.cse2 (= ~pumpRunning~0 1)) (.cse7 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse0 (not .cse6)) (.cse1 (not (= |old(~pumpRunning~0)| 1)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 (and .cse5 .cse6 .cse7 (<= |timeShift_isMethaneAlarm_#res#1| 0) .cse8 .cse9 .cse10 (<= 0 |timeShift_isMethaneAlarm_#res#1|) .cse2) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))) (let ((.cse11 (= |timeShift_isHighWaterLevel_~tmp~2#1| 0)) (.cse12 (not (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0))) (.cse13 (= |timeShift_isHighWaterSensorDry_#res#1| 0)) (.cse14 (not (= |timeShift_isHighWaterLevel_#res#1| 0)))) (or (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse2) .cse3 .cse4 .cse0 (not (= ~methaneLevelCritical~0 1)) (and .cse11 .cse7 .cse12 .cse8 .cse13 .cse9 .cse10 .cse14 .cse2) (and .cse15 .cse11 .cse7 .cse12 .cse13 .cse9 .cse14))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse5 .cse1)))) [2022-07-22 17:38:33,198 INFO L895 garLoopResultBuilder]: At program point L378-2(lines 374 385) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1))) (or .cse1 .cse2 (= ~pumpRunning~0 1)) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 (<= ~waterLevel~0 1) .cse2) (or .cse0 .cse1 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-07-22 17:38:33,198 INFO L899 garLoopResultBuilder]: For program point L345-1(line 345) no Hoare annotation was computed. [2022-07-22 17:38:33,198 INFO L895 garLoopResultBuilder]: At program point L147(line 147) the Hoare annotation is: (let ((.cse3 (= 1 ~systemActive~0))) (let ((.cse1 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse3))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1))) (or .cse1 .cse2 .cse0 (not (= ~methaneLevelCritical~0 1))) (or .cse1 .cse2 .cse0 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)))))) [2022-07-22 17:38:33,199 INFO L895 garLoopResultBuilder]: At program point L263(lines 248 266) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse3 (<= ~waterLevel~0 1) .cse5 .cse4)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse5))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1))) (or .cse1 .cse2 .cse0 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))) (or .cse1 .cse2 .cse0 (and .cse3 (= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (not (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0)) (= |timeShift_isHighWaterSensorDry_#res#1| 0) .cse4 (not (= |timeShift_isHighWaterLevel_#res#1| 0))) (not (= ~methaneLevelCritical~0 1)))))) [2022-07-22 17:38:33,199 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 101 124) no Hoare annotation was computed. [2022-07-22 17:38:33,199 INFO L895 garLoopResultBuilder]: At program point L197(line 197) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0))) (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse6)) (.cse2 (and .cse3 (<= ~waterLevel~0 1) .cse6 .cse4 .cse5))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1))) (or .cse1 .cse0 (not (= ~methaneLevelCritical~0 1)) .cse2 (and .cse3 (= |timeShift_isHighWaterLevel_~tmp~2#1| 0) .cse4 (not (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0)) (= |timeShift_isHighWaterSensorDry_#res#1| 0) .cse5 (not (= |timeShift_isHighWaterLevel_#res#1| 0)))) (or .cse1 .cse0 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse2)))) [2022-07-22 17:38:33,199 INFO L899 garLoopResultBuilder]: For program point L197-1(line 197) no Hoare annotation was computed. [2022-07-22 17:38:33,199 INFO L899 garLoopResultBuilder]: For program point L932(line 932) no Hoare annotation was computed. [2022-07-22 17:38:33,199 INFO L895 garLoopResultBuilder]: At program point L152(line 152) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1))) (or .cse1 .cse2 (= ~pumpRunning~0 1)) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 (<= ~waterLevel~0 1) .cse2) (or .cse0 .cse1 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-07-22 17:38:33,199 INFO L895 garLoopResultBuilder]: At program point L152-1(lines 133 157) the Hoare annotation is: (let ((.cse6 (= 1 ~systemActive~0)) (.cse15 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (and .cse15 .cse5 .cse9)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (<= |timeShift_activatePump_~tmp~1#1| 0)) (.cse10 (< 0 (+ |timeShift_activatePump_~tmp~1#1| 1))) (.cse2 (= ~pumpRunning~0 1)) (.cse7 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse0 (not .cse6)) (.cse1 (not (= |old(~pumpRunning~0)| 1)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 (and .cse5 .cse6 .cse7 (<= |timeShift_isMethaneAlarm_#res#1| 0) .cse8 .cse9 .cse10 (<= 0 |timeShift_isMethaneAlarm_#res#1|) .cse2) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))) (let ((.cse11 (= |timeShift_isHighWaterLevel_~tmp~2#1| 0)) (.cse12 (not (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0))) (.cse13 (= |timeShift_isHighWaterSensorDry_#res#1| 0)) (.cse14 (not (= |timeShift_isHighWaterLevel_#res#1| 0)))) (or (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse2) .cse3 .cse4 .cse0 (not (= ~methaneLevelCritical~0 1)) (and .cse11 .cse7 .cse12 .cse8 .cse13 .cse9 .cse10 .cse14 .cse2) (and .cse15 .cse11 .cse7 .cse12 .cse13 .cse9 .cse14))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse5 .cse1)))) [2022-07-22 17:38:33,199 INFO L895 garLoopResultBuilder]: At program point L933(lines 928 935) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 1))) (or .cse1 (not (= |old(~pumpRunning~0)| 1))) (or .cse0 .cse1 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-07-22 17:38:33,199 INFO L899 garLoopResultBuilder]: For program point L347(lines 347 367) no Hoare annotation was computed. [2022-07-22 17:38:33,199 INFO L899 garLoopResultBuilder]: For program point L112-1(lines 112 118) no Hoare annotation was computed. [2022-07-22 17:38:33,200 INFO L899 garLoopResultBuilder]: For program point L174(lines 174 180) no Hoare annotation was computed. [2022-07-22 17:38:33,200 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 149) no Hoare annotation was computed. [2022-07-22 17:38:33,200 INFO L895 garLoopResultBuilder]: At program point L174-2(lines 167 183) the Hoare annotation is: (let ((.cse1 (= 1 ~systemActive~0))) (let ((.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not .cse1)) (.cse0 (<= ~waterLevel~0 1)) (.cse2 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse3 (<= |timeShift_activatePump_~tmp~1#1| 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (< 0 (+ |timeShift_activatePump_~tmp~1#1| 1))) (.cse6 (= ~pumpRunning~0 1))) (and (let ((.cse13 (= ~pumpRunning~0 0)) (.cse9 (= |timeShift_isHighWaterLevel_~tmp~2#1| 0)) (.cse10 (not (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0))) (.cse11 (= |timeShift_isHighWaterSensorDry_#res#1| 0)) (.cse12 (not (= |timeShift_isHighWaterLevel_#res#1| 0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) .cse7 .cse8 (not (= ~methaneLevelCritical~0 1)) (and .cse9 .cse2 .cse10 .cse3 .cse11 .cse4 .cse5 .cse12 .cse6) (and .cse13 .cse0 .cse2 .cse4) (and .cse13 .cse9 .cse2 .cse10 .cse11 .cse4 .cse12))) (or .cse8 (not (= |old(~pumpRunning~0)| 1))) (or .cse7 .cse8 (and .cse0 .cse1 .cse2 (<= |timeShift_isMethaneAlarm_#res#1| 0) .cse3 .cse4 .cse5 (<= 0 |timeShift_isMethaneAlarm_#res#1|) .cse6) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)))))) [2022-07-22 17:38:33,200 INFO L899 garLoopResultBuilder]: For program point L137(lines 137 154) no Hoare annotation was computed. [2022-07-22 17:38:33,200 INFO L899 garLoopResultBuilder]: For program point L455(lines 455 461) no Hoare annotation was computed. [2022-07-22 17:38:33,200 INFO L895 garLoopResultBuilder]: At program point L199(lines 192 202) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0))) (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 1)) (.cse5 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse4))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1))) (or .cse1 .cse0 (not (= ~methaneLevelCritical~0 1)) (and .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse2 (= |timeShift_isHighWaterLevel_~tmp~2#1| 0) .cse5 (not (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0)) (= |timeShift_isHighWaterSensorDry_#res#1| 0) .cse6 (not (= |timeShift_isHighWaterLevel_#res#1| 0)))) (or (and .cse2 .cse3 .cse4 .cse5 (<= |timeShift_isMethaneAlarm_#res#1| 0) .cse6 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) .cse1 .cse0 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)))))) [2022-07-22 17:38:33,200 INFO L899 garLoopResultBuilder]: For program point L257(lines 257 261) no Hoare annotation was computed. [2022-07-22 17:38:33,200 INFO L899 garLoopResultBuilder]: For program point L257-2(lines 257 261) no Hoare annotation was computed. [2022-07-22 17:38:33,200 INFO L895 garLoopResultBuilder]: At program point L447(lines 442 450) the Hoare annotation is: (let ((.cse14 (<= ~waterLevel~0 1)) (.cse10 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse11 (<= |timeShift_activatePump_~tmp~1#1| 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (< 0 (+ |timeShift_activatePump_~tmp~1#1| 1))) (.cse15 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse7 (= ~pumpRunning~0 1)) (.cse17 (= 1 ~systemActive~0))) (let ((.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse5 (= |timeShift_getWaterLevel_#res#1| 1)) (.cse3 (not (<= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 0 ~methaneLevelCritical~0))) (.cse16 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not .cse17)) (.cse8 (and .cse14 .cse17 .cse10 .cse11 .cse12 .cse13 .cse15 .cse7)) (.cse9 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse6 .cse7) (or .cse0 .cse2 .cse8 .cse9 (and (= |timeShift_isHighWaterLevel_~tmp~2#1| 0) .cse10 (not (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0)) .cse11 (= |timeShift_isHighWaterSensorDry_#res#1| 0) .cse12 .cse13 (not (= |timeShift_isHighWaterLevel_#res#1| 0)) .cse7)) (or (and .cse14 .cse15) .cse16 .cse2 .cse6) (or .cse0 .cse1 .cse2 .cse9 .cse5) (or (and (= ~pumpRunning~0 0) .cse14 .cse12 .cse15) .cse0 (and .cse14 .cse17 .cse10 (<= |timeShift_isMethaneAlarm_#res#1| 0) .cse11 .cse12 .cse13 (<= 0 |timeShift_isMethaneAlarm_#res#1|) .cse15 .cse7) .cse2 .cse3 .cse4) (or .cse16 .cse0 .cse2 .cse8 .cse9)))) [2022-07-22 17:38:33,201 INFO L895 garLoopResultBuilder]: At program point L208(lines 203 211) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (= |timeShift_isPumpRunning_#res#1| 1)) (.cse6 (= ~pumpRunning~0 1)) (.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse4) (or .cse2 .cse4 (and .cse5 .cse6)) (or .cse1 (and .cse5 (= |timeShift_isHighWaterLevel_~tmp~2#1| 0) (not (= |timeShift_processEnvironment_~tmp~0#1| 0)) (not (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0)) (<= |timeShift_activatePump_~tmp~1#1| 0) (= |timeShift_isHighWaterSensorDry_#res#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0) (< 0 (+ |timeShift_activatePump_~tmp~1#1| 1)) (not (= |timeShift_isHighWaterLevel_#res#1| 0)) .cse6) .cse2 .cse3) (or .cse1 .cse2 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-07-22 17:38:33,201 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 101 124) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse3)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 1))) (or .cse0 .cse1 .cse2 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))) (or .cse2 (not (= |old(~pumpRunning~0)| 1)) (and .cse3 (= ~pumpRunning~0 1)))))) [2022-07-22 17:38:33,201 INFO L895 garLoopResultBuilder]: At program point L460(lines 451 464) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and .cse3 (<= ~waterLevel~0 1) .cse4)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 1)) (and .cse3 (= |timeShift_isHighWaterSensorDry_#res#1| 0) .cse4)) (or .cse2 (not (= |old(~pumpRunning~0)| 1))) (or .cse0 .cse1 .cse2 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)))))) [2022-07-22 17:38:33,201 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 101 124) no Hoare annotation was computed. [2022-07-22 17:38:33,201 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 932) no Hoare annotation was computed. [2022-07-22 17:38:33,201 INFO L899 garLoopResultBuilder]: For program point L105-1(lines 104 123) no Hoare annotation was computed. [2022-07-22 17:38:33,201 INFO L899 garLoopResultBuilder]: For program point L357(lines 357 363) no Hoare annotation was computed. [2022-07-22 17:38:33,202 INFO L895 garLoopResultBuilder]: At program point L163(lines 158 165) the Hoare annotation is: (let ((.cse1 (= 1 ~systemActive~0))) (let ((.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not .cse1)) (.cse0 (<= ~waterLevel~0 1)) (.cse2 (not (= |timeShift_processEnvironment_~tmp~0#1| 0))) (.cse3 (<= |timeShift_activatePump_~tmp~1#1| 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (< 0 (+ |timeShift_activatePump_~tmp~1#1| 1))) (.cse6 (= ~pumpRunning~0 1))) (and (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) .cse7 .cse8 (not (= ~methaneLevelCritical~0 1)) (and (= |timeShift_isHighWaterLevel_~tmp~2#1| 0) .cse2 (not (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0)) .cse3 (= |timeShift_isHighWaterSensorDry_#res#1| 0) .cse4 .cse5 (not (= |timeShift_isHighWaterLevel_#res#1| 0)) .cse6)) (or .cse8 (not (= |old(~pumpRunning~0)| 1))) (or .cse7 .cse8 (and .cse0 .cse1 .cse2 (<= |timeShift_isMethaneAlarm_#res#1| 0) .cse3 .cse4 .cse5 (<= 0 |timeShift_isMethaneAlarm_#res#1|) .cse6) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)))))) [2022-07-22 17:38:33,202 INFO L899 garLoopResultBuilder]: For program point L283(lines 283 287) no Hoare annotation was computed. [2022-07-22 17:38:33,202 INFO L902 garLoopResultBuilder]: At program point L535(lines 528 537) the Hoare annotation is: true [2022-07-22 17:38:33,202 INFO L899 garLoopResultBuilder]: For program point L548(lines 548 555) no Hoare annotation was computed. [2022-07-22 17:38:33,202 INFO L899 garLoopResultBuilder]: For program point L548-2(lines 548 555) no Hoare annotation was computed. [2022-07-22 17:38:33,202 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-22 17:38:33,202 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-22 17:38:33,202 INFO L899 garLoopResultBuilder]: For program point L317(lines 317 321) no Hoare annotation was computed. [2022-07-22 17:38:33,202 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-22 17:38:33,203 INFO L895 garLoopResultBuilder]: At program point L317-2(lines 311 322) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0 0) .cse2 (<= 0 ~methaneLevelCritical~0)) (and .cse0 .cse1 (= ~methaneLevelCritical~0 1) .cse2) (and .cse1 .cse2 (= ~pumpRunning~0 1)))) [2022-07-22 17:38:33,203 INFO L899 garLoopResultBuilder]: For program point L301(lines 301 307) no Hoare annotation was computed. [2022-07-22 17:38:33,203 INFO L902 garLoopResultBuilder]: At program point L557(lines 538 560) the Hoare annotation is: true [2022-07-22 17:38:33,203 INFO L899 garLoopResultBuilder]: For program point L301-1(lines 301 307) no Hoare annotation was computed. [2022-07-22 17:38:33,203 INFO L902 garLoopResultBuilder]: At program point L330(lines 271 334) the Hoare annotation is: true [2022-07-22 17:38:33,203 INFO L895 garLoopResultBuilder]: At program point L293(line 293) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1 (<= ~methaneLevelCritical~0 0) .cse2 (<= 0 ~methaneLevelCritical~0)) (and .cse0 .cse1 (= ~methaneLevelCritical~0 1) .cse2) (and .cse1 .cse2 (= ~pumpRunning~0 1)))) [2022-07-22 17:38:33,203 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-22 17:38:33,203 INFO L895 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-07-22 17:38:33,204 INFO L895 garLoopResultBuilder]: At program point L525(lines 521 527) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-07-22 17:38:33,204 INFO L895 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-07-22 17:38:33,204 INFO L895 garLoopResultBuilder]: At program point L327(lines 280 328) the Hoare annotation is: false [2022-07-22 17:38:33,204 INFO L899 garLoopResultBuilder]: For program point L282(lines 281 326) no Hoare annotation was computed. [2022-07-22 17:38:33,204 INFO L899 garLoopResultBuilder]: For program point L311(lines 311 322) no Hoare annotation was computed. [2022-07-22 17:38:33,204 INFO L895 garLoopResultBuilder]: At program point L303(line 303) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= ~methaneLevelCritical~0 0) .cse2 (<= 0 ~methaneLevelCritical~0)) (and .cse0 .cse1 (= ~methaneLevelCritical~0 1) .cse2) (and .cse1 .cse2 (= ~pumpRunning~0 1)))) [2022-07-22 17:38:33,204 INFO L895 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-07-22 17:38:33,204 INFO L895 garLoopResultBuilder]: At program point L324(lines 281 326) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1 (<= ~methaneLevelCritical~0 0) .cse2 (<= 0 ~methaneLevelCritical~0)) (and .cse0 .cse1 (= ~methaneLevelCritical~0 1) .cse2) (and .cse1 .cse2 (= ~pumpRunning~0 1)))) [2022-07-22 17:38:33,205 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 297) no Hoare annotation was computed. [2022-07-22 17:38:33,205 INFO L899 garLoopResultBuilder]: For program point L291-1(lines 291 297) no Hoare annotation was computed. [2022-07-22 17:38:33,205 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 386 397) no Hoare annotation was computed. [2022-07-22 17:38:33,205 INFO L899 garLoopResultBuilder]: For program point L390-1(lines 386 397) no Hoare annotation was computed. [2022-07-22 17:38:33,205 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 386 397) the Hoare annotation is: (let ((.cse2 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (= ~pumpRunning~0 1)) .cse1) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse0 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse1) (or .cse2 .cse0 (not (= ~methaneLevelCritical~0 1)) .cse1))) [2022-07-22 17:38:33,207 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:33,209 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-22 17:38:33,232 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.07 05:38:33 BoogieIcfgContainer [2022-07-22 17:38:33,232 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-22 17:38:33,233 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-22 17:38:33,233 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-22 17:38:33,233 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-22 17:38:33,234 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:38:26" (3/4) ... [2022-07-22 17:38:33,235 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-22 17:38:33,239 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-22 17:38:33,240 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-22 17:38:33,240 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-22 17:38:33,240 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-22 17:38:33,240 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-22 17:38:33,240 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-22 17:38:33,244 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-07-22 17:38:33,245 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-22 17:38:33,245 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-22 17:38:33,245 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-22 17:38:33,246 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-22 17:38:33,246 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:33,246 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:33,269 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || pumpRunning == 1)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || !(\old(pumpRunning) == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-07-22 17:38:33,270 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) && (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && 0 <= \result) && pumpRunning == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && ((((((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && pumpRunning == 1) || ((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((((((tmp == 0 && !(tmp == 0)) && !(tmp___0 == 0)) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && !(\result == 0)) && pumpRunning == 1)) || ((((((pumpRunning == 0 && tmp == 0) && !(tmp == 0)) && !(tmp___0 == 0)) && \result == 0) && \old(waterLevel) == waterLevel) && !(\result == 0)))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || !(\old(pumpRunning) == 1)) [2022-07-22 17:38:33,270 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) && ((((((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && pumpRunning == 1) || ((((pumpRunning == 0 && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((((pumpRunning == 0 && !(tmp == 0)) && tmp == 0) && !(tmp == 0)) && !(tmp___0 == 0)) && \result == 0) && \old(waterLevel) == waterLevel) && !(\result == 0))) || !(methaneLevelCritical == 1)) || ((((((((tmp == 0 && !(tmp == 0)) && !(tmp___0 == 0)) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && !(\result == 0)) && pumpRunning == 1))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || !(\old(pumpRunning) == 1))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && 0 <= \result) && pumpRunning == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-07-22 17:38:33,270 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || ((((((pumpRunning == 0 && tmp == 0) && !(tmp == 0)) && !(tmp___0 == 0)) && \result == 0) && \old(waterLevel) == waterLevel) && !(\result == 0)))) && ((((((((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && !(tmp == 0)) && \result <= 0) && \old(waterLevel) == waterLevel) && 0 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-07-22 17:38:33,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || \result == 1) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || pumpRunning == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && \result <= 1) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || ((((((((tmp == 0 && !(tmp == 0)) && !(tmp___0 == 0)) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && !(\result == 0)) && pumpRunning == 1))) && ((((waterLevel <= 1 && \result <= 1) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || \result == 1)) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && \result <= 1) || !(\old(pumpRunning) == 0)) || (((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && 0 <= \result) && \result <= 1) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && \result <= 1) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) [2022-07-22 17:38:33,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) && (!(1 == systemActive) || !(\old(pumpRunning) == 1))) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-07-22 17:38:33,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((((((tmp == 0 && !(tmp == 0)) && !(tmp___0 == 0)) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && !(\result == 0)) && pumpRunning == 1)) || (((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || ((((((pumpRunning == 0 && tmp == 0) && !(tmp == 0)) && !(tmp___0 == 0)) && \result == 0) && \old(waterLevel) == waterLevel) && !(\result == 0))) && (!(1 == systemActive) || !(\old(pumpRunning) == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && 0 <= \result) && pumpRunning == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-07-22 17:38:33,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((((((tmp == 0 && !(tmp == 0)) && !(tmp___0 == 0)) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && !(\result == 0)) && pumpRunning == 1)) && (!(1 == systemActive) || !(\old(pumpRunning) == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && 0 <= \result) && pumpRunning == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-07-22 17:38:33,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) && (((((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((pumpRunning == 0 && tmp == 0) && !(tmp___0 == 0)) && \result == 0) && \old(waterLevel) == waterLevel) && !(\result == 0))) || !(methaneLevelCritical == 1)) [2022-07-22 17:38:33,271 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) && ((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1))) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (\result == 1 && pumpRunning == 1))) && (((!(\old(pumpRunning) == 0) || (((((((((\result == 1 && tmp == 0) && !(tmp == 0)) && !(tmp___0 == 0)) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && !(\result == 0)) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-07-22 17:38:33,272 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) && (!(1 == systemActive) || !(\old(pumpRunning) == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-07-22 17:38:33,284 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-22 17:38:33,284 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-22 17:38:33,285 INFO L158 Benchmark]: Toolchain (without parser) took 7469.22ms. Allocated memory was 111.1MB in the beginning and 201.3MB in the end (delta: 90.2MB). Free memory was 79.9MB in the beginning and 172.0MB in the end (delta: -92.1MB). Peak memory consumption was 113.2MB. Max. memory is 16.1GB. [2022-07-22 17:38:33,285 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 111.1MB. Free memory is still 68.1MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 17:38:33,285 INFO L158 Benchmark]: CACSL2BoogieTranslator took 349.76ms. Allocated memory was 111.1MB in the beginning and 140.5MB in the end (delta: 29.4MB). Free memory was 79.7MB in the beginning and 106.5MB in the end (delta: -26.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-07-22 17:38:33,285 INFO L158 Benchmark]: Boogie Procedure Inliner took 57.56ms. Allocated memory is still 140.5MB. Free memory was 106.5MB in the beginning and 103.8MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-22 17:38:33,285 INFO L158 Benchmark]: Boogie Preprocessor took 27.42ms. Allocated memory is still 140.5MB. Free memory was 103.8MB in the beginning and 102.3MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 17:38:33,286 INFO L158 Benchmark]: RCFGBuilder took 317.56ms. Allocated memory is still 140.5MB. Free memory was 102.3MB in the beginning and 85.8MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-22 17:38:33,286 INFO L158 Benchmark]: TraceAbstraction took 6661.02ms. Allocated memory was 140.5MB in the beginning and 201.3MB in the end (delta: 60.8MB). Free memory was 85.5MB in the beginning and 59.6MB in the end (delta: 25.9MB). Peak memory consumption was 95.1MB. Max. memory is 16.1GB. [2022-07-22 17:38:33,286 INFO L158 Benchmark]: Witness Printer took 51.35ms. Allocated memory is still 201.3MB. Free memory was 59.6MB in the beginning and 172.0MB in the end (delta: -112.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-22 17:38:33,287 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 111.1MB. Free memory is still 68.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 349.76ms. Allocated memory was 111.1MB in the beginning and 140.5MB in the end (delta: 29.4MB). Free memory was 79.7MB in the beginning and 106.5MB in the end (delta: -26.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 57.56ms. Allocated memory is still 140.5MB. Free memory was 106.5MB in the beginning and 103.8MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 27.42ms. Allocated memory is still 140.5MB. Free memory was 103.8MB in the beginning and 102.3MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 317.56ms. Allocated memory is still 140.5MB. Free memory was 102.3MB in the beginning and 85.8MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 6661.02ms. Allocated memory was 140.5MB in the beginning and 201.3MB in the end (delta: 60.8MB). Free memory was 85.5MB in the beginning and 59.6MB in the end (delta: 25.9MB). Peak memory consumption was 95.1MB. Max. memory is 16.1GB. * Witness Printer took 51.35ms. Allocated memory is still 201.3MB. Free memory was 59.6MB in the beginning and 172.0MB in the end (delta: -112.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 932]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 81 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.6s, OverallIterations: 11, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1256 SdHoareTripleChecker+Valid, 0.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1221 mSDsluCounter, 3011 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2016 mSDsCounter, 213 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 923 IncrementalHoareTripleChecker+Invalid, 1136 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 213 mSolverCounterUnsat, 995 mSDtfsCounter, 923 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 191 GetRequests, 111 SyntacticMatches, 2 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 118 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=688occurred in iteration=9, InterpolantAutomatonStates: 78, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 11 MinimizatonAttempts, 306 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 37 LocationsWithAnnotation, 1171 PreInvPairs, 1418 NumberOfFragments, 2268 HoareAnnotationTreeSize, 1171 FomulaSimplifications, 1828 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 37 FomulaSimplificationsInter, 16532 FormulaSimplificationTreeSizeReductionInter, 3.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 497 NumberOfCodeBlocks, 497 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 485 ConstructedInterpolants, 0 QuantifiedInterpolants, 1233 SizeOfPredicates, 5 NumberOfNonLiveVariables, 363 ConjunctsInSsa, 15 ConjunctsInUnsatCore, 12 InterpolantComputations, 11 PerfectInterpolantSequences, 10/12 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || \result == 1) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || pumpRunning == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && \result <= 1) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || ((((((((tmp == 0 && !(tmp == 0)) && !(tmp___0 == 0)) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && !(\result == 0)) && pumpRunning == 1))) && ((((waterLevel <= 1 && \result <= 1) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || \result == 1)) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && \result <= 1) || !(\old(pumpRunning) == 0)) || (((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && 0 <= \result) && \result <= 1) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && \result <= 1) && pumpRunning == 1)) || !(methaneLevelCritical == 1)) - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 528]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 280]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 451]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) && (!(1 == systemActive) || !(\old(pumpRunning) == 1))) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: ((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) && ((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1))) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (\result == 1 && pumpRunning == 1))) && (((!(\old(pumpRunning) == 0) || (((((((((\result == 1 && tmp == 0) && !(tmp == 0)) && !(tmp___0 == 0)) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && !(\result == 0)) && pumpRunning == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) && (!(1 == systemActive) || !(\old(pumpRunning) == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 192]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || ((((((pumpRunning == 0 && tmp == 0) && !(tmp == 0)) && !(tmp___0 == 0)) && \result == 0) && \old(waterLevel) == waterLevel) && !(\result == 0)))) && ((((((((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && !(tmp == 0)) && \result <= 0) && \old(waterLevel) == waterLevel) && 0 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 158]: Loop Invariant Derived loop invariant: (((((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((((((tmp == 0 && !(tmp == 0)) && !(tmp___0 == 0)) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && !(\result == 0)) && pumpRunning == 1)) && (!(1 == systemActive) || !(\old(pumpRunning) == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && 0 <= \result) && pumpRunning == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 374]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || pumpRunning == 1)) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || !(\old(pumpRunning) == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) && (((((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((pumpRunning == 0 && tmp == 0) && !(tmp___0 == 0)) && \result == 0) && \old(waterLevel) == waterLevel) && !(\result == 0))) || !(methaneLevelCritical == 1)) - InvariantResult [Line: 338]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) && ((((((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && pumpRunning == 1) || ((((pumpRunning == 0 && !(tmp == 0)) && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((((pumpRunning == 0 && !(tmp == 0)) && tmp == 0) && !(tmp == 0)) && !(tmp___0 == 0)) && \result == 0) && \old(waterLevel) == waterLevel) && !(\result == 0))) || !(methaneLevelCritical == 1)) || ((((((((tmp == 0 && !(tmp == 0)) && !(tmp___0 == 0)) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && !(\result == 0)) && pumpRunning == 1))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || !(\old(pumpRunning) == 1))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && 0 <= \result) && pumpRunning == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: (((((((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((((((tmp == 0 && !(tmp == 0)) && !(tmp___0 == 0)) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && !(\result == 0)) && pumpRunning == 1)) || (((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || ((((((pumpRunning == 0 && tmp == 0) && !(tmp == 0)) && !(tmp___0 == 0)) && \result == 0) && \old(waterLevel) == waterLevel) && !(\result == 0))) && (!(1 == systemActive) || !(\old(pumpRunning) == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && 0 <= \result) && pumpRunning == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 133]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || pumpRunning == 1) && (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && 0 <= \result) && pumpRunning == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && ((((((((((((waterLevel <= 1 && 1 == systemActive) && !(tmp == 0)) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && pumpRunning == 1) || ((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((((((((tmp == 0 && !(tmp == 0)) && !(tmp___0 == 0)) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 < tmp + 1) && !(\result == 0)) && pumpRunning == 1)) || ((((((pumpRunning == 0 && tmp == 0) && !(tmp == 0)) && !(tmp___0 == 0)) && \result == 0) && \old(waterLevel) == waterLevel) && !(\result == 0)))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || waterLevel <= 1) || !(\old(pumpRunning) == 1)) - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) || (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0)) || ((1 == systemActive && splverifierCounter == 0) && pumpRunning == 1) - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-07-22 17:38:33,321 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE