./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 791161d1 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4d13ffd2557e7d7902d8a5eac414f9fb7393252d85c14855e86000741be6847f --- Real Ultimate output --- This is Ultimate 0.2.2-?-791161d [2022-07-22 17:38:39,912 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-22 17:38:39,914 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-22 17:38:39,946 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-22 17:38:39,947 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-22 17:38:39,948 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-22 17:38:39,949 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-22 17:38:39,951 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-22 17:38:39,953 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-22 17:38:39,953 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-22 17:38:39,954 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-22 17:38:39,956 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-22 17:38:39,956 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-22 17:38:39,957 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-22 17:38:39,958 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-22 17:38:39,959 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-22 17:38:39,960 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-22 17:38:39,961 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-22 17:38:39,962 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-22 17:38:39,964 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-22 17:38:39,966 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-22 17:38:39,967 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-22 17:38:39,968 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-22 17:38:39,969 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-22 17:38:39,970 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-22 17:38:39,972 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-22 17:38:39,973 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-22 17:38:39,973 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-22 17:38:39,974 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-22 17:38:39,975 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-22 17:38:39,976 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-22 17:38:39,976 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-22 17:38:39,977 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-22 17:38:39,977 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-22 17:38:39,978 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-22 17:38:39,979 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-22 17:38:39,979 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-22 17:38:39,980 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-22 17:38:39,980 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-22 17:38:39,981 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-22 17:38:39,981 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-22 17:38:39,982 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-22 17:38:39,983 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-22 17:38:40,005 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-22 17:38:40,005 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-22 17:38:40,006 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-22 17:38:40,006 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-22 17:38:40,007 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-22 17:38:40,007 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-22 17:38:40,008 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-22 17:38:40,008 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-22 17:38:40,008 INFO L138 SettingsManager]: * Use SBE=true [2022-07-22 17:38:40,008 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-22 17:38:40,008 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-22 17:38:40,009 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-22 17:38:40,009 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-22 17:38:40,009 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-22 17:38:40,009 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-22 17:38:40,009 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-22 17:38:40,010 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-22 17:38:40,010 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-22 17:38:40,010 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-22 17:38:40,010 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-22 17:38:40,012 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-22 17:38:40,012 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-22 17:38:40,012 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-22 17:38:40,012 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-22 17:38:40,012 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:38:40,013 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-22 17:38:40,013 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-22 17:38:40,013 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-22 17:38:40,013 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-22 17:38:40,013 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-22 17:38:40,014 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-22 17:38:40,014 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-22 17:38:40,014 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-22 17:38:40,014 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4d13ffd2557e7d7902d8a5eac414f9fb7393252d85c14855e86000741be6847f [2022-07-22 17:38:40,243 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-22 17:38:40,263 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-22 17:38:40,267 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-22 17:38:40,268 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-22 17:38:40,269 INFO L275 PluginConnector]: CDTParser initialized [2022-07-22 17:38:40,270 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c [2022-07-22 17:38:40,327 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bedd249cc/21a5ce5381224d1d827a9d02d918545a/FLAG4b0f3ea1c [2022-07-22 17:38:40,784 INFO L306 CDTParser]: Found 1 translation units. [2022-07-22 17:38:40,784 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c [2022-07-22 17:38:40,796 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bedd249cc/21a5ce5381224d1d827a9d02d918545a/FLAG4b0f3ea1c [2022-07-22 17:38:40,806 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bedd249cc/21a5ce5381224d1d827a9d02d918545a [2022-07-22 17:38:40,808 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-22 17:38:40,809 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-22 17:38:40,810 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-22 17:38:40,810 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-22 17:38:40,814 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-22 17:38:40,814 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:38:40" (1/1) ... [2022-07-22 17:38:40,815 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@617a8993 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:40, skipping insertion in model container [2022-07-22 17:38:40,816 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 05:38:40" (1/1) ... [2022-07-22 17:38:40,827 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-22 17:38:40,867 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-22 17:38:41,030 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c[1605,1618] [2022-07-22 17:38:41,220 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:38:41,232 INFO L203 MainTranslator]: Completed pre-run [2022-07-22 17:38:41,250 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c[1605,1618] [2022-07-22 17:38:41,302 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 17:38:41,317 INFO L208 MainTranslator]: Completed translation [2022-07-22 17:38:41,317 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:41 WrapperNode [2022-07-22 17:38:41,318 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-22 17:38:41,319 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-22 17:38:41,319 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-22 17:38:41,320 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-22 17:38:41,332 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:41" (1/1) ... [2022-07-22 17:38:41,355 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:41" (1/1) ... [2022-07-22 17:38:41,382 INFO L137 Inliner]: procedures = 58, calls = 162, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 283 [2022-07-22 17:38:41,383 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-22 17:38:41,384 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-22 17:38:41,384 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-22 17:38:41,384 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-22 17:38:41,391 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:41" (1/1) ... [2022-07-22 17:38:41,391 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:41" (1/1) ... [2022-07-22 17:38:41,393 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:41" (1/1) ... [2022-07-22 17:38:41,394 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:41" (1/1) ... [2022-07-22 17:38:41,400 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:41" (1/1) ... [2022-07-22 17:38:41,405 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:41" (1/1) ... [2022-07-22 17:38:41,407 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:41" (1/1) ... [2022-07-22 17:38:41,410 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-22 17:38:41,411 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-22 17:38:41,412 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-22 17:38:41,412 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-22 17:38:41,413 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:41" (1/1) ... [2022-07-22 17:38:41,425 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 17:38:41,433 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:41,443 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-22 17:38:41,448 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-22 17:38:41,473 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-22 17:38:41,474 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-22 17:38:41,474 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-22 17:38:41,474 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-22 17:38:41,474 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-22 17:38:41,474 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-22 17:38:41,474 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-22 17:38:41,474 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-22 17:38:41,474 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-22 17:38:41,474 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:38:41,474 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:38:41,474 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-22 17:38:41,474 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-22 17:38:41,475 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-22 17:38:41,475 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-22 17:38:41,475 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-22 17:38:41,475 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-22 17:38:41,475 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-22 17:38:41,475 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-22 17:38:41,475 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-22 17:38:41,476 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-22 17:38:41,476 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-22 17:38:41,476 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-22 17:38:41,476 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-22 17:38:41,567 INFO L234 CfgBuilder]: Building ICFG [2022-07-22 17:38:41,569 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-22 17:38:41,938 INFO L275 CfgBuilder]: Performing block encoding [2022-07-22 17:38:41,946 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-22 17:38:41,956 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-22 17:38:41,959 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:38:41 BoogieIcfgContainer [2022-07-22 17:38:41,959 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-22 17:38:41,960 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-22 17:38:41,963 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-22 17:38:41,966 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-22 17:38:41,967 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.07 05:38:40" (1/3) ... [2022-07-22 17:38:41,968 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@183ddf54 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:38:41, skipping insertion in model container [2022-07-22 17:38:41,968 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 05:38:41" (2/3) ... [2022-07-22 17:38:41,968 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@183ddf54 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 05:38:41, skipping insertion in model container [2022-07-22 17:38:41,968 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:38:41" (3/3) ... [2022-07-22 17:38:41,970 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product62.cil.c [2022-07-22 17:38:41,983 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-22 17:38:41,984 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-22 17:38:42,038 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-22 17:38:42,045 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@778aa190, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@72516d0c [2022-07-22 17:38:42,045 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-22 17:38:42,050 INFO L276 IsEmpty]: Start isEmpty. Operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-07-22 17:38:42,059 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-22 17:38:42,059 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:42,060 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:42,060 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:42,065 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:42,065 INFO L85 PathProgramCache]: Analyzing trace with hash 1444919738, now seen corresponding path program 1 times [2022-07-22 17:38:42,073 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:42,074 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1171700498] [2022-07-22 17:38:42,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:42,075 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:42,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:42,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-22 17:38:42,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:42,256 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:42,257 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:42,257 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1171700498] [2022-07-22 17:38:42,258 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1171700498] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:42,258 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:42,259 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-22 17:38:42,260 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [667044402] [2022-07-22 17:38:42,260 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:42,266 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-22 17:38:42,266 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:42,293 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-22 17:38:42,295 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:38:42,298 INFO L87 Difference]: Start difference. First operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:42,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:42,357 INFO L93 Difference]: Finished difference Result 214 states and 289 transitions. [2022-07-22 17:38:42,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-22 17:38:42,359 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-22 17:38:42,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:42,369 INFO L225 Difference]: With dead ends: 214 [2022-07-22 17:38:42,369 INFO L226 Difference]: Without dead ends: 102 [2022-07-22 17:38:42,375 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-22 17:38:42,378 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:42,379 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:38:42,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2022-07-22 17:38:42,436 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 102. [2022-07-22 17:38:42,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 83 states have internal predecessors, (97), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-07-22 17:38:42,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 132 transitions. [2022-07-22 17:38:42,448 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 132 transitions. Word has length 25 [2022-07-22 17:38:42,449 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:42,449 INFO L495 AbstractCegarLoop]: Abstraction has 102 states and 132 transitions. [2022-07-22 17:38:42,450 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:42,450 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 132 transitions. [2022-07-22 17:38:42,458 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-22 17:38:42,459 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:42,459 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:42,459 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-22 17:38:42,460 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:42,462 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:42,463 INFO L85 PathProgramCache]: Analyzing trace with hash 1097025375, now seen corresponding path program 1 times [2022-07-22 17:38:42,463 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:42,464 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1705584000] [2022-07-22 17:38:42,464 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:42,464 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:42,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:42,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-22 17:38:42,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:42,593 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:42,593 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:42,594 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1705584000] [2022-07-22 17:38:42,594 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1705584000] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:42,594 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:42,594 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 17:38:42,595 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [439762537] [2022-07-22 17:38:42,596 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:42,597 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 17:38:42,598 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:42,599 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 17:38:42,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:38:42,602 INFO L87 Difference]: Start difference. First operand 102 states and 132 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:42,625 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:42,627 INFO L93 Difference]: Finished difference Result 169 states and 219 transitions. [2022-07-22 17:38:42,628 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 17:38:42,629 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-22 17:38:42,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:42,633 INFO L225 Difference]: With dead ends: 169 [2022-07-22 17:38:42,633 INFO L226 Difference]: Without dead ends: 93 [2022-07-22 17:38:42,638 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 17:38:42,640 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 13 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:42,642 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 221 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:38:42,643 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-07-22 17:38:42,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2022-07-22 17:38:42,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 77 states have internal predecessors, (90), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-22 17:38:42,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 120 transitions. [2022-07-22 17:38:42,661 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 120 transitions. Word has length 26 [2022-07-22 17:38:42,661 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:42,662 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 120 transitions. [2022-07-22 17:38:42,663 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:42,663 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 120 transitions. [2022-07-22 17:38:42,665 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-07-22 17:38:42,666 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:42,666 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:42,666 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-22 17:38:42,666 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:42,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:42,667 INFO L85 PathProgramCache]: Analyzing trace with hash 2131311946, now seen corresponding path program 1 times [2022-07-22 17:38:42,667 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:42,667 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [432491503] [2022-07-22 17:38:42,668 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:42,668 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:42,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:42,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:42,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:42,754 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:42,754 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:42,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [432491503] [2022-07-22 17:38:42,755 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [432491503] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:42,755 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:42,755 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:38:42,755 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [352687218] [2022-07-22 17:38:42,755 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:42,756 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:38:42,756 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:42,756 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:38:42,757 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:38:42,757 INFO L87 Difference]: Start difference. First operand 93 states and 120 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:42,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:42,820 INFO L93 Difference]: Finished difference Result 179 states and 234 transitions. [2022-07-22 17:38:42,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 17:38:42,820 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-07-22 17:38:42,821 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:42,822 INFO L225 Difference]: With dead ends: 179 [2022-07-22 17:38:42,822 INFO L226 Difference]: Without dead ends: 93 [2022-07-22 17:38:42,823 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:38:42,824 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 145 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:42,824 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [145 Valid, 307 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 17:38:42,825 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-07-22 17:38:42,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2022-07-22 17:38:42,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 77 states have internal predecessors, (89), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-22 17:38:42,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 119 transitions. [2022-07-22 17:38:42,833 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 119 transitions. Word has length 31 [2022-07-22 17:38:42,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:42,834 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 119 transitions. [2022-07-22 17:38:42,834 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-22 17:38:42,834 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 119 transitions. [2022-07-22 17:38:42,835 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-07-22 17:38:42,835 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:42,836 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:42,836 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-22 17:38:42,836 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:42,836 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:42,837 INFO L85 PathProgramCache]: Analyzing trace with hash 394218810, now seen corresponding path program 1 times [2022-07-22 17:38:42,837 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:42,837 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1376289197] [2022-07-22 17:38:42,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:42,837 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:42,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:42,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:42,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:42,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:42,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:42,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:42,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:42,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-07-22 17:38:42,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:42,976 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:42,976 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:42,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1376289197] [2022-07-22 17:38:42,976 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1376289197] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:42,976 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:42,977 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 17:38:42,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1332668436] [2022-07-22 17:38:42,977 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:42,978 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 17:38:42,978 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:42,979 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 17:38:42,979 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 17:38:42,979 INFO L87 Difference]: Start difference. First operand 93 states and 119 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-22 17:38:43,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:43,211 INFO L93 Difference]: Finished difference Result 271 states and 345 transitions. [2022-07-22 17:38:43,211 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 17:38:43,211 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 46 [2022-07-22 17:38:43,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:43,213 INFO L225 Difference]: With dead ends: 271 [2022-07-22 17:38:43,213 INFO L226 Difference]: Without dead ends: 185 [2022-07-22 17:38:43,214 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-07-22 17:38:43,215 INFO L413 NwaCegarLoop]: 155 mSDtfsCounter, 216 mSDsluCounter, 191 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 346 SdHoareTripleChecker+Invalid, 205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:43,215 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [218 Valid, 346 Invalid, 205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:38:43,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2022-07-22 17:38:43,231 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 179. [2022-07-22 17:38:43,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 133 states have (on average 1.2481203007518797) internal successors, (166), 142 states have internal predecessors, (166), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-07-22 17:38:43,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 217 transitions. [2022-07-22 17:38:43,233 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 217 transitions. Word has length 46 [2022-07-22 17:38:43,233 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:43,233 INFO L495 AbstractCegarLoop]: Abstraction has 179 states and 217 transitions. [2022-07-22 17:38:43,234 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-22 17:38:43,234 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 217 transitions. [2022-07-22 17:38:43,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-22 17:38:43,235 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:43,235 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:43,235 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-22 17:38:43,236 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:43,236 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:43,236 INFO L85 PathProgramCache]: Analyzing trace with hash 1565999890, now seen corresponding path program 1 times [2022-07-22 17:38:43,236 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:43,236 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1557037256] [2022-07-22 17:38:43,237 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:43,237 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:43,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:43,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:43,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:43,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:43,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:43,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:43,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:43,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-07-22 17:38:43,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:43,307 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:43,307 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:43,307 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1557037256] [2022-07-22 17:38:43,307 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1557037256] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:43,308 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:43,308 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:38:43,308 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1947585924] [2022-07-22 17:38:43,308 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:43,308 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:38:43,309 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:43,309 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:38:43,309 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:38:43,309 INFO L87 Difference]: Start difference. First operand 179 states and 217 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:43,583 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:43,583 INFO L93 Difference]: Finished difference Result 458 states and 576 transitions. [2022-07-22 17:38:43,584 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-22 17:38:43,584 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2022-07-22 17:38:43,584 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:43,587 INFO L225 Difference]: With dead ends: 458 [2022-07-22 17:38:43,587 INFO L226 Difference]: Without dead ends: 286 [2022-07-22 17:38:43,588 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-07-22 17:38:43,593 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 158 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 431 SdHoareTripleChecker+Invalid, 251 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:43,594 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [165 Valid, 431 Invalid, 251 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:38:43,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2022-07-22 17:38:43,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 278. [2022-07-22 17:38:43,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 207 states have (on average 1.2367149758454106) internal successors, (256), 219 states have internal predecessors, (256), 35 states have call successors, (35), 30 states have call predecessors, (35), 35 states have return successors, (48), 37 states have call predecessors, (48), 35 states have call successors, (48) [2022-07-22 17:38:43,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 339 transitions. [2022-07-22 17:38:43,641 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 339 transitions. Word has length 52 [2022-07-22 17:38:43,642 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:43,643 INFO L495 AbstractCegarLoop]: Abstraction has 278 states and 339 transitions. [2022-07-22 17:38:43,643 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-22 17:38:43,643 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 339 transitions. [2022-07-22 17:38:43,646 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-22 17:38:43,646 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:43,646 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:43,646 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-22 17:38:43,647 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:43,647 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:43,647 INFO L85 PathProgramCache]: Analyzing trace with hash 862642872, now seen corresponding path program 1 times [2022-07-22 17:38:43,647 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:43,648 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1525418009] [2022-07-22 17:38:43,648 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:43,648 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:43,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:43,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:43,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:43,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:38:43,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:43,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:43,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:43,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:43,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:43,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-22 17:38:43,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:43,773 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:43,773 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:43,774 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1525418009] [2022-07-22 17:38:43,774 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1525418009] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:43,774 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:43,774 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 17:38:43,774 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [680393381] [2022-07-22 17:38:43,774 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:43,775 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-22 17:38:43,775 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:43,775 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 17:38:43,775 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-22 17:38:43,775 INFO L87 Difference]: Start difference. First operand 278 states and 339 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-22 17:38:44,315 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:44,315 INFO L93 Difference]: Finished difference Result 670 states and 856 transitions. [2022-07-22 17:38:44,316 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-07-22 17:38:44,316 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2022-07-22 17:38:44,317 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:44,320 INFO L225 Difference]: With dead ends: 670 [2022-07-22 17:38:44,320 INFO L226 Difference]: Without dead ends: 498 [2022-07-22 17:38:44,321 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-07-22 17:38:44,322 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 364 mSDsluCounter, 260 mSDsCounter, 0 mSdLazyCounter, 425 mSolverCounterSat, 152 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 368 SdHoareTripleChecker+Valid, 376 SdHoareTripleChecker+Invalid, 577 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 152 IncrementalHoareTripleChecker+Valid, 425 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:44,322 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [368 Valid, 376 Invalid, 577 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [152 Valid, 425 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-22 17:38:44,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2022-07-22 17:38:44,358 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 464. [2022-07-22 17:38:44,360 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 464 states, 343 states have (on average 1.215743440233236) internal successors, (417), 365 states have internal predecessors, (417), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2022-07-22 17:38:44,363 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 464 states to 464 states and 572 transitions. [2022-07-22 17:38:44,363 INFO L78 Accepts]: Start accepts. Automaton has 464 states and 572 transitions. Word has length 56 [2022-07-22 17:38:44,363 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:44,364 INFO L495 AbstractCegarLoop]: Abstraction has 464 states and 572 transitions. [2022-07-22 17:38:44,364 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-22 17:38:44,364 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 572 transitions. [2022-07-22 17:38:44,365 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-22 17:38:44,365 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:44,366 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:44,366 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-22 17:38:44,366 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:44,366 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:44,367 INFO L85 PathProgramCache]: Analyzing trace with hash 924682486, now seen corresponding path program 1 times [2022-07-22 17:38:44,367 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:44,367 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1700945292] [2022-07-22 17:38:44,367 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:44,367 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:44,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:44,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:44,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:44,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:38:44,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:44,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:44,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:44,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:44,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:44,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-22 17:38:44,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:44,432 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:44,432 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:44,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1700945292] [2022-07-22 17:38:44,433 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1700945292] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:44,433 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:44,433 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-22 17:38:44,433 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1014460505] [2022-07-22 17:38:44,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:44,438 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-22 17:38:44,438 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:44,438 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-22 17:38:44,439 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-22 17:38:44,439 INFO L87 Difference]: Start difference. First operand 464 states and 572 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-22 17:38:44,693 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:44,693 INFO L93 Difference]: Finished difference Result 860 states and 1070 transitions. [2022-07-22 17:38:44,694 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-22 17:38:44,694 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2022-07-22 17:38:44,695 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:44,700 INFO L225 Difference]: With dead ends: 860 [2022-07-22 17:38:44,700 INFO L226 Difference]: Without dead ends: 498 [2022-07-22 17:38:44,702 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2022-07-22 17:38:44,703 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 184 mSDsluCounter, 215 mSDsCounter, 0 mSdLazyCounter, 272 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 348 SdHoareTripleChecker+Invalid, 346 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 272 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:44,703 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [187 Valid, 348 Invalid, 346 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 272 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-22 17:38:44,705 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2022-07-22 17:38:44,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 464. [2022-07-22 17:38:44,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 464 states, 343 states have (on average 1.2128279883381925) internal successors, (416), 365 states have internal predecessors, (416), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2022-07-22 17:38:44,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 464 states to 464 states and 571 transitions. [2022-07-22 17:38:44,745 INFO L78 Accepts]: Start accepts. Automaton has 464 states and 571 transitions. Word has length 56 [2022-07-22 17:38:44,745 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:44,745 INFO L495 AbstractCegarLoop]: Abstraction has 464 states and 571 transitions. [2022-07-22 17:38:44,746 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-22 17:38:44,746 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 571 transitions. [2022-07-22 17:38:44,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-22 17:38:44,747 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:44,747 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:44,748 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-22 17:38:44,748 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:44,748 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:44,748 INFO L85 PathProgramCache]: Analyzing trace with hash 790668980, now seen corresponding path program 1 times [2022-07-22 17:38:44,749 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:44,749 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [340283146] [2022-07-22 17:38:44,749 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:44,749 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:44,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:44,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:44,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:44,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:38:44,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:44,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:44,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:44,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:44,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:44,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-22 17:38:44,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:44,854 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:44,854 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:44,854 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [340283146] [2022-07-22 17:38:44,854 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [340283146] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:44,854 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:44,855 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-07-22 17:38:44,855 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1236675020] [2022-07-22 17:38:44,855 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:44,855 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-07-22 17:38:44,855 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:44,856 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-07-22 17:38:44,856 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2022-07-22 17:38:44,856 INFO L87 Difference]: Start difference. First operand 464 states and 571 transitions. Second operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-22 17:38:45,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:45,226 INFO L93 Difference]: Finished difference Result 950 states and 1185 transitions. [2022-07-22 17:38:45,226 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-22 17:38:45,226 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2022-07-22 17:38:45,227 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:45,229 INFO L225 Difference]: With dead ends: 950 [2022-07-22 17:38:45,229 INFO L226 Difference]: Without dead ends: 493 [2022-07-22 17:38:45,231 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=156, Unknown=0, NotChecked=0, Total=210 [2022-07-22 17:38:45,231 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 221 mSDsluCounter, 363 mSDsCounter, 0 mSdLazyCounter, 523 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 477 SdHoareTripleChecker+Invalid, 595 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 523 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:45,232 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [224 Valid, 477 Invalid, 595 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 523 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-22 17:38:45,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 493 states. [2022-07-22 17:38:45,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 493 to 467. [2022-07-22 17:38:45,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 467 states, 348 states have (on average 1.206896551724138) internal successors, (420), 369 states have internal predecessors, (420), 59 states have call successors, (59), 45 states have call predecessors, (59), 59 states have return successors, (94), 63 states have call predecessors, (94), 59 states have call successors, (94) [2022-07-22 17:38:45,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 467 states to 467 states and 573 transitions. [2022-07-22 17:38:45,262 INFO L78 Accepts]: Start accepts. Automaton has 467 states and 573 transitions. Word has length 56 [2022-07-22 17:38:45,262 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:45,262 INFO L495 AbstractCegarLoop]: Abstraction has 467 states and 573 transitions. [2022-07-22 17:38:45,262 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-22 17:38:45,262 INFO L276 IsEmpty]: Start isEmpty. Operand 467 states and 573 transitions. [2022-07-22 17:38:45,263 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-07-22 17:38:45,263 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:45,264 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:45,264 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-22 17:38:45,264 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:45,265 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:45,265 INFO L85 PathProgramCache]: Analyzing trace with hash -1116274415, now seen corresponding path program 1 times [2022-07-22 17:38:45,265 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:45,265 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [864000497] [2022-07-22 17:38:45,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:45,265 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:45,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:45,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:45,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:45,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:38:45,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:45,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:45,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:45,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:45,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:45,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-22 17:38:45,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:45,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-07-22 17:38:45,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:45,455 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-22 17:38:45,455 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:45,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [864000497] [2022-07-22 17:38:45,456 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [864000497] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:38:45,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [26009784] [2022-07-22 17:38:45,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:45,456 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:45,457 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:45,459 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:38:45,470 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-22 17:38:45,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:45,552 INFO L263 TraceCheckSpWp]: Trace formula consists of 393 conjuncts, 17 conjunts are in the unsatisfiable core [2022-07-22 17:38:45,557 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:38:45,924 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 17:38:45,924 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 17:38:45,925 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [26009784] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:45,925 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-22 17:38:45,925 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2022-07-22 17:38:45,925 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1541678677] [2022-07-22 17:38:45,925 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:45,926 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-22 17:38:45,926 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:45,926 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-22 17:38:45,926 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-07-22 17:38:45,927 INFO L87 Difference]: Start difference. First operand 467 states and 573 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-22 17:38:46,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:46,098 INFO L93 Difference]: Finished difference Result 1368 states and 1709 transitions. [2022-07-22 17:38:46,099 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-22 17:38:46,099 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2022-07-22 17:38:46,099 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:46,104 INFO L225 Difference]: With dead ends: 1368 [2022-07-22 17:38:46,104 INFO L226 Difference]: Without dead ends: 908 [2022-07-22 17:38:46,105 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 68 SyntacticMatches, 2 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-07-22 17:38:46,106 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 72 mSDsluCounter, 601 mSDsCounter, 0 mSdLazyCounter, 198 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 733 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 198 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:46,106 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 733 Invalid, 202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 198 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 17:38:46,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 908 states. [2022-07-22 17:38:46,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 908 to 906. [2022-07-22 17:38:46,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 673 states have (on average 1.1961367013372957) internal successors, (805), 711 states have internal predecessors, (805), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (189), 123 states have call predecessors, (189), 117 states have call successors, (189) [2022-07-22 17:38:46,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1111 transitions. [2022-07-22 17:38:46,168 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1111 transitions. Word has length 65 [2022-07-22 17:38:46,168 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:46,168 INFO L495 AbstractCegarLoop]: Abstraction has 906 states and 1111 transitions. [2022-07-22 17:38:46,169 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-22 17:38:46,169 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1111 transitions. [2022-07-22 17:38:46,170 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-07-22 17:38:46,170 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:46,171 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:46,206 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-22 17:38:46,383 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:46,383 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:46,384 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:46,384 INFO L85 PathProgramCache]: Analyzing trace with hash -930662327, now seen corresponding path program 1 times [2022-07-22 17:38:46,384 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:46,384 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1355411139] [2022-07-22 17:38:46,384 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:46,384 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:46,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:46,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:46,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:46,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-22 17:38:46,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:46,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:46,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:46,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:46,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:46,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-22 17:38:46,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:46,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-22 17:38:46,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:46,515 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-22 17:38:46,515 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:46,515 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1355411139] [2022-07-22 17:38:46,515 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1355411139] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:46,515 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:46,516 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-22 17:38:46,516 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1624462488] [2022-07-22 17:38:46,516 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:46,517 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-22 17:38:46,517 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:46,517 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-22 17:38:46,517 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-07-22 17:38:46,518 INFO L87 Difference]: Start difference. First operand 906 states and 1111 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-22 17:38:47,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:47,039 INFO L93 Difference]: Finished difference Result 1828 states and 2237 transitions. [2022-07-22 17:38:47,039 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-07-22 17:38:47,040 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 66 [2022-07-22 17:38:47,040 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:47,044 INFO L225 Difference]: With dead ends: 1828 [2022-07-22 17:38:47,044 INFO L226 Difference]: Without dead ends: 929 [2022-07-22 17:38:47,047 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=90, Invalid=330, Unknown=0, NotChecked=0, Total=420 [2022-07-22 17:38:47,047 INFO L413 NwaCegarLoop]: 176 mSDtfsCounter, 349 mSDsluCounter, 502 mSDsCounter, 0 mSdLazyCounter, 650 mSolverCounterSat, 138 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 678 SdHoareTripleChecker+Invalid, 788 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 138 IncrementalHoareTripleChecker+Valid, 650 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:47,048 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [350 Valid, 678 Invalid, 788 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [138 Valid, 650 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-22 17:38:47,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 929 states. [2022-07-22 17:38:47,101 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 929 to 906. [2022-07-22 17:38:47,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 673 states have (on average 1.1812778603268945) internal successors, (795), 711 states have internal predecessors, (795), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (174), 123 states have call predecessors, (174), 117 states have call successors, (174) [2022-07-22 17:38:47,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1086 transitions. [2022-07-22 17:38:47,107 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1086 transitions. Word has length 66 [2022-07-22 17:38:47,108 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:47,108 INFO L495 AbstractCegarLoop]: Abstraction has 906 states and 1086 transitions. [2022-07-22 17:38:47,108 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-22 17:38:47,108 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1086 transitions. [2022-07-22 17:38:47,110 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-07-22 17:38:47,111 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:47,111 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:47,111 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-22 17:38:47,111 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:47,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:47,113 INFO L85 PathProgramCache]: Analyzing trace with hash 1947456301, now seen corresponding path program 1 times [2022-07-22 17:38:47,113 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:47,113 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [127394858] [2022-07-22 17:38:47,113 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:47,114 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:47,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:47,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:47,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:47,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-22 17:38:47,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:47,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-22 17:38:47,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:47,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:47,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:47,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:47,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:47,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-22 17:38:47,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:47,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-07-22 17:38:47,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:47,224 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-22 17:38:47,224 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:47,224 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [127394858] [2022-07-22 17:38:47,224 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [127394858] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 17:38:47,225 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 17:38:47,225 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-07-22 17:38:47,225 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1266517173] [2022-07-22 17:38:47,225 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 17:38:47,225 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-07-22 17:38:47,226 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:47,226 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-07-22 17:38:47,226 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=110, Unknown=0, NotChecked=0, Total=132 [2022-07-22 17:38:47,227 INFO L87 Difference]: Start difference. First operand 906 states and 1086 transitions. Second operand has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-22 17:38:48,277 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:48,278 INFO L93 Difference]: Finished difference Result 1806 states and 2184 transitions. [2022-07-22 17:38:48,278 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-07-22 17:38:48,278 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 69 [2022-07-22 17:38:48,279 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:48,283 INFO L225 Difference]: With dead ends: 1806 [2022-07-22 17:38:48,283 INFO L226 Difference]: Without dead ends: 907 [2022-07-22 17:38:48,287 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 287 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=262, Invalid=1070, Unknown=0, NotChecked=0, Total=1332 [2022-07-22 17:38:48,287 INFO L413 NwaCegarLoop]: 184 mSDtfsCounter, 409 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 1482 mSolverCounterSat, 265 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 410 SdHoareTripleChecker+Valid, 432 SdHoareTripleChecker+Invalid, 1747 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 265 IncrementalHoareTripleChecker+Valid, 1482 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:48,288 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [410 Valid, 432 Invalid, 1747 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [265 Valid, 1482 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-07-22 17:38:48,289 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 907 states. [2022-07-22 17:38:48,337 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 907 to 874. [2022-07-22 17:38:48,338 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 874 states, 641 states have (on average 1.1528861154446177) internal successors, (739), 679 states have internal predecessors, (739), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (168), 123 states have call predecessors, (168), 117 states have call successors, (168) [2022-07-22 17:38:48,342 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 874 states to 874 states and 1024 transitions. [2022-07-22 17:38:48,343 INFO L78 Accepts]: Start accepts. Automaton has 874 states and 1024 transitions. Word has length 69 [2022-07-22 17:38:48,343 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:48,343 INFO L495 AbstractCegarLoop]: Abstraction has 874 states and 1024 transitions. [2022-07-22 17:38:48,343 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-22 17:38:48,344 INFO L276 IsEmpty]: Start isEmpty. Operand 874 states and 1024 transitions. [2022-07-22 17:38:48,350 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2022-07-22 17:38:48,350 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 17:38:48,350 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:48,350 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-07-22 17:38:48,351 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 17:38:48,351 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 17:38:48,351 INFO L85 PathProgramCache]: Analyzing trace with hash 20560600, now seen corresponding path program 1 times [2022-07-22 17:38:48,351 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 17:38:48,352 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1177036551] [2022-07-22 17:38:48,352 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:48,352 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 17:38:48,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:48,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-22 17:38:48,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:48,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-22 17:38:48,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:48,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-22 17:38:48,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:48,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 17:38:48,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:48,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-22 17:38:48,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:48,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-22 17:38:48,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:48,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-22 17:38:48,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:48,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-07-22 17:38:48,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:48,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-22 17:38:48,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:48,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-07-22 17:38:48,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:48,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 96 [2022-07-22 17:38:48,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:48,648 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 2 proven. 21 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-07-22 17:38:48,649 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 17:38:48,649 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1177036551] [2022-07-22 17:38:48,649 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1177036551] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-22 17:38:48,649 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1930876895] [2022-07-22 17:38:48,649 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 17:38:48,649 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-22 17:38:48,650 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 17:38:48,651 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-22 17:38:48,681 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-22 17:38:48,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 17:38:48,763 INFO L263 TraceCheckSpWp]: Trace formula consists of 492 conjuncts, 13 conjunts are in the unsatisfiable core [2022-07-22 17:38:48,771 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 17:38:48,895 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-22 17:38:48,896 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-22 17:38:49,118 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-07-22 17:38:49,118 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1930876895] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-22 17:38:49,119 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-22 17:38:49,119 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 8, 9] total 23 [2022-07-22 17:38:49,119 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1757994978] [2022-07-22 17:38:49,119 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-22 17:38:49,120 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-07-22 17:38:49,120 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 17:38:49,120 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-07-22 17:38:49,121 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=431, Unknown=0, NotChecked=0, Total=506 [2022-07-22 17:38:49,121 INFO L87 Difference]: Start difference. First operand 874 states and 1024 transitions. Second operand has 23 states, 23 states have (on average 5.3478260869565215) internal successors, (123), 16 states have internal predecessors, (123), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2022-07-22 17:38:51,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 17:38:51,369 INFO L93 Difference]: Finished difference Result 1808 states and 2190 transitions. [2022-07-22 17:38:51,369 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 74 states. [2022-07-22 17:38:51,370 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 5.3478260869565215) internal successors, (123), 16 states have internal predecessors, (123), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) Word has length 107 [2022-07-22 17:38:51,370 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 17:38:51,371 INFO L225 Difference]: With dead ends: 1808 [2022-07-22 17:38:51,371 INFO L226 Difference]: Without dead ends: 0 [2022-07-22 17:38:51,376 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 336 GetRequests, 242 SyntacticMatches, 4 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2526 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=1811, Invalid=6561, Unknown=0, NotChecked=0, Total=8372 [2022-07-22 17:38:51,377 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 1214 mSDsluCounter, 652 mSDsCounter, 0 mSdLazyCounter, 1985 mSolverCounterSat, 701 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1217 SdHoareTripleChecker+Valid, 747 SdHoareTripleChecker+Invalid, 2686 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 701 IncrementalHoareTripleChecker+Valid, 1985 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-07-22 17:38:51,377 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1217 Valid, 747 Invalid, 2686 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [701 Valid, 1985 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-07-22 17:38:51,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-22 17:38:51,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-22 17:38:51,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 17:38:51,378 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-22 17:38:51,378 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 107 [2022-07-22 17:38:51,378 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 17:38:51,378 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-22 17:38:51,379 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 5.3478260869565215) internal successors, (123), 16 states have internal predecessors, (123), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2022-07-22 17:38:51,379 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-22 17:38:51,379 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-22 17:38:51,381 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-22 17:38:51,409 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-22 17:38:51,603 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-22 17:38:51,605 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-22 17:38:57,167 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 751 758) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= 0 ~methaneLevelCritical~0)) (not (<= ~waterLevel~0 1)) (= 0 ~systemActive~0)) [2022-07-22 17:38:57,168 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 751 758) no Hoare annotation was computed. [2022-07-22 17:38:57,168 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 751 758) no Hoare annotation was computed. [2022-07-22 17:38:57,168 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 641 647) no Hoare annotation was computed. [2022-07-22 17:38:57,168 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 641 647) the Hoare annotation is: true [2022-07-22 17:38:57,168 INFO L895 garLoopResultBuilder]: At program point L566(lines 561 569) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-22 17:38:57,169 INFO L895 garLoopResultBuilder]: At program point L694(line 694) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-22 17:38:57,169 INFO L899 garLoopResultBuilder]: For program point L694-1(lines 675 699) no Hoare annotation was computed. [2022-07-22 17:38:57,169 INFO L895 garLoopResultBuilder]: At program point L849(lines 834 852) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-22 17:38:57,169 INFO L899 garLoopResultBuilder]: For program point L843(lines 843 847) no Hoare annotation was computed. [2022-07-22 17:38:57,169 INFO L899 garLoopResultBuilder]: For program point L843-2(lines 843 847) no Hoare annotation was computed. [2022-07-22 17:38:57,169 INFO L895 garLoopResultBuilder]: At program point L689(line 689) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-22 17:38:57,169 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 675 699) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-22 17:38:57,170 INFO L895 garLoopResultBuilder]: At program point L685(line 685) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-22 17:38:57,170 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 675 699) no Hoare annotation was computed. [2022-07-22 17:38:57,170 INFO L899 garLoopResultBuilder]: For program point L683(lines 683 691) no Hoare annotation was computed. [2022-07-22 17:38:57,170 INFO L899 garLoopResultBuilder]: For program point L679(lines 679 696) no Hoare annotation was computed. [2022-07-22 17:38:57,170 INFO L899 garLoopResultBuilder]: For program point L498-1(lines 494 505) no Hoare annotation was computed. [2022-07-22 17:38:57,170 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 494 505) the Hoare annotation is: (let ((.cse0 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (not (<= 0 |old(~methaneLevelCritical~0)|))) (.cse3 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1 .cse2 .cse3))) [2022-07-22 17:38:57,170 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 494 505) no Hoare annotation was computed. [2022-07-22 17:38:57,171 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 931 960) no Hoare annotation was computed. [2022-07-22 17:38:57,171 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 931 960) the Hoare annotation is: true [2022-07-22 17:38:57,171 INFO L902 garLoopResultBuilder]: At program point L956(lines 931 960) the Hoare annotation is: true [2022-07-22 17:38:57,171 INFO L899 garLoopResultBuilder]: For program point L952(line 952) no Hoare annotation was computed. [2022-07-22 17:38:57,171 INFO L899 garLoopResultBuilder]: For program point L945(lines 945 949) no Hoare annotation was computed. [2022-07-22 17:38:57,171 INFO L902 garLoopResultBuilder]: At program point L945-1(lines 945 949) the Hoare annotation is: true [2022-07-22 17:38:57,171 INFO L899 garLoopResultBuilder]: For program point L942(line 942) no Hoare annotation was computed. [2022-07-22 17:38:57,171 INFO L902 garLoopResultBuilder]: At program point L941-2(lines 941 955) the Hoare annotation is: true [2022-07-22 17:38:57,172 INFO L902 garLoopResultBuilder]: At program point L937(line 937) the Hoare annotation is: true [2022-07-22 17:38:57,172 INFO L899 garLoopResultBuilder]: For program point L937-1(line 937) no Hoare annotation was computed. [2022-07-22 17:38:57,172 INFO L895 garLoopResultBuilder]: At program point L543(lines 538 546) the Hoare annotation is: (let ((.cse8 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse0 .cse3 .cse2 .cse4) (let ((.cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6 .cse7 .cse8) .cse9 .cse1 .cse2 .cse4 (and .cse10 .cse5 .cse6 .cse7 .cse8))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse8) (let ((.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and (<= 1 ~pumpRunning~0) .cse6 .cse11) (and .cse10 .cse5 .cse6 .cse11) .cse1 .cse2 .cse4)) (or .cse9 .cse3 .cse2 .cse4))) [2022-07-22 17:38:57,172 INFO L899 garLoopResultBuilder]: For program point L81(lines 81 87) no Hoare annotation was computed. [2022-07-22 17:38:57,172 INFO L899 garLoopResultBuilder]: For program point L77(lines 77 90) no Hoare annotation was computed. [2022-07-22 17:38:57,173 INFO L895 garLoopResultBuilder]: At program point L77-1(lines 62 94) the Hoare annotation is: (let ((.cse1 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0))) (let ((.cse10 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse11 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse3 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0))) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse16 (not .cse1)) (.cse7 (= 0 ~systemActive~0)) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (<= 1 ~pumpRunning~0) .cse1 .cse2) .cse3 (and .cse4 .cse5 .cse1 .cse2) .cse6 .cse7 .cse8) (or (and .cse4 .cse5 .cse9 .cse1 .cse10 .cse11) (and .cse12 .cse5 .cse9 .cse1 .cse10 .cse11) .cse13 .cse3 .cse6 .cse7 .cse8) (or .cse14 .cse13 .cse15 .cse10 .cse7) (or .cse0 .cse15 (and .cse4 .cse2 .cse16) .cse7 .cse8) (or .cse14 .cse0 (and .cse9 .cse11) .cse3 .cse6 .cse7) (or (and .cse12 .cse5 .cse16) .cse13 .cse15 (and .cse4 .cse5 .cse16) .cse7 .cse8)))) [2022-07-22 17:38:57,173 INFO L895 garLoopResultBuilder]: At program point L775(lines 770 778) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2) (or .cse0 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse3 .cse1 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse1 .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse3 .cse1))) [2022-07-22 17:38:57,173 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 617 640) no Hoare annotation was computed. [2022-07-22 17:38:57,173 INFO L899 garLoopResultBuilder]: For program point L709(lines 709 717) no Hoare annotation was computed. [2022-07-22 17:38:57,173 INFO L895 garLoopResultBuilder]: At program point L69(line 69) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse1 .cse5 .cse6) .cse7 .cse3 .cse4)) (or (and .cse1 .cse5 .cse2) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse7 (and (<= 1 ~pumpRunning~0) .cse2) .cse3 .cse4))) [2022-07-22 17:38:57,173 INFO L899 garLoopResultBuilder]: For program point L69-1(line 69) no Hoare annotation was computed. [2022-07-22 17:38:57,174 INFO L899 garLoopResultBuilder]: For program point L705(lines 705 722) no Hoare annotation was computed. [2022-07-22 17:38:57,174 INFO L899 garLoopResultBuilder]: For program point L474(lines 474 478) no Hoare annotation was computed. [2022-07-22 17:38:57,174 INFO L895 garLoopResultBuilder]: At program point L474-2(lines 470 481) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2022-07-22 17:38:57,174 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-07-22 17:38:57,174 INFO L899 garLoopResultBuilder]: For program point L628-1(lines 628 634) no Hoare annotation was computed. [2022-07-22 17:38:57,174 INFO L895 garLoopResultBuilder]: At program point L715(line 715) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2022-07-22 17:38:57,174 INFO L895 garLoopResultBuilder]: At program point L711(line 711) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2022-07-22 17:38:57,175 INFO L899 garLoopResultBuilder]: For program point L71(lines 71 91) no Hoare annotation was computed. [2022-07-22 17:38:57,175 INFO L895 garLoopResultBuilder]: At program point L707(line 707) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2022-07-22 17:38:57,175 INFO L899 garLoopResultBuilder]: For program point L707-1(line 707) no Hoare annotation was computed. [2022-07-22 17:38:57,175 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2))) [2022-07-22 17:38:57,175 INFO L895 garLoopResultBuilder]: At program point L720(line 720) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2022-07-22 17:38:57,175 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 617 640) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2 .cse3) (or (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1 .cse2 .cse3))) [2022-07-22 17:38:57,176 INFO L895 garLoopResultBuilder]: At program point L720-1(lines 701 725) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse1 .cse5 .cse6) .cse7 .cse3 .cse4)) (or (and .cse1 .cse5 .cse2) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse7 (and (<= 1 ~pumpRunning~0) .cse2) .cse3 .cse4))) [2022-07-22 17:38:57,176 INFO L899 garLoopResultBuilder]: For program point L621-1(lines 620 639) no Hoare annotation was computed. [2022-07-22 17:38:57,176 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 617 640) no Hoare annotation was computed. [2022-07-22 17:38:57,176 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-07-22 17:38:57,176 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 506 514) the Hoare annotation is: true [2022-07-22 17:38:57,176 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 506 514) no Hoare annotation was computed. [2022-07-22 17:38:57,176 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 506 514) no Hoare annotation was computed. [2022-07-22 17:38:57,176 INFO L895 garLoopResultBuilder]: At program point L989(lines 985 991) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~11#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:57,176 INFO L899 garLoopResultBuilder]: For program point L911(lines 911 915) no Hoare annotation was computed. [2022-07-22 17:38:57,177 INFO L895 garLoopResultBuilder]: At program point L589(lines 585 591) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:57,177 INFO L895 garLoopResultBuilder]: At program point L911-2(lines 903 916) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2022-07-22 17:38:57,177 INFO L899 garLoopResultBuilder]: For program point L874(lines 873 920) no Hoare annotation was computed. [2022-07-22 17:38:57,177 INFO L899 garLoopResultBuilder]: For program point L903(lines 903 916) no Hoare annotation was computed. [2022-07-22 17:38:57,177 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-22 17:38:57,177 INFO L895 garLoopResultBuilder]: At program point L895(line 895) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2022-07-22 17:38:57,177 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-22 17:38:57,178 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-22 17:38:57,178 INFO L902 garLoopResultBuilder]: At program point L924(lines 863 928) the Hoare annotation is: true [2022-07-22 17:38:57,178 INFO L895 garLoopResultBuilder]: At program point L858(lines 853 860) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2022-07-22 17:38:57,178 INFO L899 garLoopResultBuilder]: For program point L883(lines 883 889) no Hoare annotation was computed. [2022-07-22 17:38:57,178 INFO L899 garLoopResultBuilder]: For program point L883-1(lines 883 889) no Hoare annotation was computed. [2022-07-22 17:38:57,178 INFO L899 garLoopResultBuilder]: For program point L875(lines 875 879) no Hoare annotation was computed. [2022-07-22 17:38:57,178 INFO L902 garLoopResultBuilder]: At program point L999(lines 992 1001) the Hoare annotation is: true [2022-07-22 17:38:57,178 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-22 17:38:57,179 INFO L895 garLoopResultBuilder]: At program point L921(lines 872 922) the Hoare annotation is: false [2022-07-22 17:38:57,179 INFO L899 garLoopResultBuilder]: For program point L1012(lines 1012 1019) no Hoare annotation was computed. [2022-07-22 17:38:57,179 INFO L899 garLoopResultBuilder]: For program point L1012-2(lines 1012 1019) no Hoare annotation was computed. [2022-07-22 17:38:57,179 INFO L899 garLoopResultBuilder]: For program point L893(lines 893 899) no Hoare annotation was computed. [2022-07-22 17:38:57,179 INFO L902 garLoopResultBuilder]: At program point L1021(lines 1002 1024) the Hoare annotation is: true [2022-07-22 17:38:57,179 INFO L895 garLoopResultBuilder]: At program point L604(lines 599 607) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:57,179 INFO L899 garLoopResultBuilder]: For program point L893-1(lines 893 899) no Hoare annotation was computed. [2022-07-22 17:38:57,180 INFO L895 garLoopResultBuilder]: At program point L918(lines 873 920) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse9 .cse2 .cse3 .cse5 .cse8 .cse6))) [2022-07-22 17:38:57,180 INFO L895 garLoopResultBuilder]: At program point L885(line 885) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse9 .cse2 .cse3 .cse5 .cse8 .cse6))) [2022-07-22 17:38:57,180 INFO L895 garLoopResultBuilder]: At program point L596(lines 592 598) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-22 17:38:57,180 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 649 673) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-22 17:38:57,180 INFO L895 garLoopResultBuilder]: At program point L830(lines 815 833) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (= ~pumpRunning~0 0))) (or (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse2 (and .cse3 .cse1))))) [2022-07-22 17:38:57,180 INFO L895 garLoopResultBuilder]: At program point L731(lines 726 733) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0 1)) (.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|))) (or (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) .cse4 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse5 (and .cse3 .cse1 .cse4) .cse6 .cse0 .cse2)) (or .cse5 (not (<= 1 ~methaneLevelCritical~0)) .cse6 .cse2))) [2022-07-22 17:38:57,181 INFO L899 garLoopResultBuilder]: For program point L824(lines 824 828) no Hoare annotation was computed. [2022-07-22 17:38:57,181 INFO L895 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse2 (and (= ~pumpRunning~0 0) .cse1)))) [2022-07-22 17:38:57,181 INFO L899 garLoopResultBuilder]: For program point L824-2(lines 824 828) no Hoare annotation was computed. [2022-07-22 17:38:57,181 INFO L899 garLoopResultBuilder]: For program point L657(lines 657 665) no Hoare annotation was computed. [2022-07-22 17:38:57,181 INFO L899 garLoopResultBuilder]: For program point L653(lines 653 670) no Hoare annotation was computed. [2022-07-22 17:38:57,181 INFO L895 garLoopResultBuilder]: At program point L556(lines 547 560) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse2 (and .cse3 .cse1))))) [2022-07-22 17:38:57,181 INFO L895 garLoopResultBuilder]: At program point L668(line 668) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-22 17:38:57,182 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 649 673) no Hoare annotation was computed. [2022-07-22 17:38:57,182 INFO L899 garLoopResultBuilder]: For program point L668-1(lines 649 673) no Hoare annotation was computed. [2022-07-22 17:38:57,182 INFO L899 garLoopResultBuilder]: For program point L551(lines 551 557) no Hoare annotation was computed. [2022-07-22 17:38:57,182 INFO L899 garLoopResultBuilder]: For program point L741(lines 741 747) no Hoare annotation was computed. [2022-07-22 17:38:57,182 INFO L895 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse2 (and .cse3 .cse1))))) [2022-07-22 17:38:57,182 INFO L895 garLoopResultBuilder]: At program point L741-2(lines 734 750) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (<= ~waterLevel~0 1)) (.cse12 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0)) (.cse6 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse7 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|)) (.cse8 (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|)) (.cse9 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse11 (<= ~methaneLevelCritical~0 0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|))) (or (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) .cse10 (and .cse3 .cse1 .cse5) (not .cse11) .cse12 .cse0 .cse2)) (let ((.cse13 (= ~pumpRunning~0 0)) (.cse14 (or (not (= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|)) (and (< 0 (+ ~methaneLevelCritical~0 1)) .cse11)))) (or .cse10 (and .cse13 .cse1 .cse14) (not (<= 1 ~methaneLevelCritical~0)) .cse12 .cse2 (and .cse13 .cse4 .cse6 .cse7 .cse14 .cse8 .cse9))))) [2022-07-22 17:38:57,182 INFO L899 garLoopResultBuilder]: For program point L739-1(line 739) no Hoare annotation was computed. [2022-07-22 17:38:57,183 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 482 493) no Hoare annotation was computed. [2022-07-22 17:38:57,183 INFO L899 garLoopResultBuilder]: For program point L486-1(lines 482 493) no Hoare annotation was computed. [2022-07-22 17:38:57,183 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 482 493) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse3 .cse4 .cse6) (or .cse0 .cse5 .cse7 .cse3 .cse4) (or .cse2 (not (<= ~methaneLevelCritical~0 0)) .cse7 .cse3 .cse4 .cse6))) [2022-07-22 17:38:57,183 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 759 769) the Hoare annotation is: true [2022-07-22 17:38:57,183 INFO L902 garLoopResultBuilder]: At program point L764(line 764) the Hoare annotation is: true [2022-07-22 17:38:57,183 INFO L899 garLoopResultBuilder]: For program point L764-1(line 764) no Hoare annotation was computed. [2022-07-22 17:38:57,183 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 759 769) no Hoare annotation was computed. [2022-07-22 17:38:57,184 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 759 769) no Hoare annotation was computed. [2022-07-22 17:38:57,187 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 17:38:57,188 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-22 17:38:57,214 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.07 05:38:57 BoogieIcfgContainer [2022-07-22 17:38:57,214 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-22 17:38:57,215 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-22 17:38:57,215 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-22 17:38:57,215 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-22 17:38:57,216 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 05:38:41" (3/4) ... [2022-07-22 17:38:57,218 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-22 17:38:57,223 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-22 17:38:57,223 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-22 17:38:57,224 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-22 17:38:57,224 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-22 17:38:57,224 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-22 17:38:57,224 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-22 17:38:57,224 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-22 17:38:57,224 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-22 17:38:57,224 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-22 17:38:57,225 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-22 17:38:57,232 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-07-22 17:38:57,232 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-22 17:38:57,233 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-22 17:38:57,233 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-22 17:38:57,234 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-22 17:38:57,234 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:57,234 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-22 17:38:57,254 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-22 17:38:57,254 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-22 17:38:57,254 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2022-07-22 17:38:57,255 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-22 17:38:57,255 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-22 17:38:57,256 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2022-07-22 17:38:57,256 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical <= 0)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || (((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || waterLevel <= \old(waterLevel)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-22 17:38:57,257 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result == 1) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result <= 1)) && (((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-22 17:38:57,257 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((((((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel <= 1) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0)))) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || ((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0))) && 1 <= tmp) && \result == 0)) [2022-07-22 17:38:57,257 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) [2022-07-22 17:38:57,257 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-22 17:38:57,258 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) [2022-07-22 17:38:57,258 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-22 17:38:57,258 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-22 17:38:57,258 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && \result == 0) || !(\old(pumpRunning) == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) [2022-07-22 17:38:57,258 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-22 17:38:57,282 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-22 17:38:57,283 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-22 17:38:57,283 INFO L158 Benchmark]: Toolchain (without parser) took 16474.25ms. Allocated memory was 92.3MB in the beginning and 172.0MB in the end (delta: 79.7MB). Free memory was 57.5MB in the beginning and 46.6MB in the end (delta: 10.8MB). Peak memory consumption was 91.3MB. Max. memory is 16.1GB. [2022-07-22 17:38:57,283 INFO L158 Benchmark]: CDTParser took 0.25ms. Allocated memory is still 92.3MB. Free memory was 71.5MB in the beginning and 71.5MB in the end (delta: 21.2kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 17:38:57,284 INFO L158 Benchmark]: CACSL2BoogieTranslator took 508.04ms. Allocated memory was 92.3MB in the beginning and 111.1MB in the end (delta: 18.9MB). Free memory was 57.3MB in the beginning and 77.4MB in the end (delta: -20.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-07-22 17:38:57,284 INFO L158 Benchmark]: Boogie Procedure Inliner took 64.08ms. Allocated memory is still 111.1MB. Free memory was 77.4MB in the beginning and 74.4MB in the end (delta: 3.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-22 17:38:57,284 INFO L158 Benchmark]: Boogie Preprocessor took 26.70ms. Allocated memory is still 111.1MB. Free memory was 74.4MB in the beginning and 72.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-22 17:38:57,285 INFO L158 Benchmark]: RCFGBuilder took 547.46ms. Allocated memory is still 111.1MB. Free memory was 72.7MB in the beginning and 55.3MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-22 17:38:57,285 INFO L158 Benchmark]: TraceAbstraction took 15254.09ms. Allocated memory was 111.1MB in the beginning and 172.0MB in the end (delta: 60.8MB). Free memory was 54.4MB in the beginning and 54.0MB in the end (delta: 334.7kB). Peak memory consumption was 75.4MB. Max. memory is 16.1GB. [2022-07-22 17:38:57,285 INFO L158 Benchmark]: Witness Printer took 67.71ms. Allocated memory is still 172.0MB. Free memory was 53.0MB in the beginning and 46.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-22 17:38:57,287 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25ms. Allocated memory is still 92.3MB. Free memory was 71.5MB in the beginning and 71.5MB in the end (delta: 21.2kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 508.04ms. Allocated memory was 92.3MB in the beginning and 111.1MB in the end (delta: 18.9MB). Free memory was 57.3MB in the beginning and 77.4MB in the end (delta: -20.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 64.08ms. Allocated memory is still 111.1MB. Free memory was 77.4MB in the beginning and 74.4MB in the end (delta: 3.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 26.70ms. Allocated memory is still 111.1MB. Free memory was 74.4MB in the beginning and 72.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 547.46ms. Allocated memory is still 111.1MB. Free memory was 72.7MB in the beginning and 55.3MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 15254.09ms. Allocated memory was 111.1MB in the beginning and 172.0MB in the end (delta: 60.8MB). Free memory was 54.4MB in the beginning and 54.0MB in the end (delta: 334.7kB). Peak memory consumption was 75.4MB. Max. memory is 16.1GB. * Witness Printer took 67.71ms. Allocated memory is still 172.0MB. Free memory was 53.0MB in the beginning and 46.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 111 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 15.2s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3376 SdHoareTripleChecker+Valid, 3.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3345 mSDsluCounter, 5237 SdHoareTripleChecker+Invalid, 3.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3643 mSDsCounter, 1540 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5876 IncrementalHoareTripleChecker+Invalid, 7416 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1540 mSolverCounterUnsat, 1594 mSDtfsCounter, 5876 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 654 GetRequests, 429 SyntacticMatches, 6 SemanticMatches, 219 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2969 ImplicationChecksByTransitivity, 1.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=906occurred in iteration=9, InterpolantAutomatonStates: 192, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 166 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 2597 PreInvPairs, 2945 NumberOfFragments, 2334 HoareAnnotationTreeSize, 2597 FomulaSimplifications, 2998 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 51 FomulaSimplificationsInter, 17436 FormulaSimplificationTreeSizeReductionInter, 5.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 827 NumberOfCodeBlocks, 827 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 919 ConstructedInterpolants, 0 QuantifiedInterpolants, 2244 SizeOfPredicates, 7 NumberOfNonLiveVariables, 885 ConjunctsInSsa, 30 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 96/135 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 547]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result == 1) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result <= 1)) && (((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 561]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 701]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && \result == 0) || !(\old(pumpRunning) == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical <= 0)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || (((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || waterLevel <= \old(waterLevel)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((((((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel <= 1) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0)))) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || ((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0))) && 1 <= tmp) && \result == 0)) - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 592]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 585]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 931]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 470]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 992]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 770]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-07-22 17:38:57,353 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE