./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version eb692b52 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9a8ef44eebf77bb9089ba7256f54c924b643d97224560b14ff4a2b7df3dcc9e0 --- Real Ultimate output --- This is Ultimate 0.2.2-?-eb692b5 [2022-07-19 17:23:10,558 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-19 17:23:10,561 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-19 17:23:10,595 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-19 17:23:10,595 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-19 17:23:10,596 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-19 17:23:10,597 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-19 17:23:10,599 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-19 17:23:10,600 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-19 17:23:10,601 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-19 17:23:10,602 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-19 17:23:10,603 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-19 17:23:10,603 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-19 17:23:10,604 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-19 17:23:10,605 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-19 17:23:10,606 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-19 17:23:10,607 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-19 17:23:10,607 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-19 17:23:10,609 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-19 17:23:10,610 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-19 17:23:10,611 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-19 17:23:10,612 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-19 17:23:10,613 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-19 17:23:10,614 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-19 17:23:10,615 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-19 17:23:10,617 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-19 17:23:10,617 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-19 17:23:10,617 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-19 17:23:10,618 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-19 17:23:10,619 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-19 17:23:10,619 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-19 17:23:10,620 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-19 17:23:10,620 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-19 17:23:10,621 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-19 17:23:10,621 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-19 17:23:10,622 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-19 17:23:10,623 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-19 17:23:10,623 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-19 17:23:10,623 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-19 17:23:10,624 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-19 17:23:10,624 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-19 17:23:10,627 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-19 17:23:10,628 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-19 17:23:10,648 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-19 17:23:10,648 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-19 17:23:10,649 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-19 17:23:10,649 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-19 17:23:10,649 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-19 17:23:10,650 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-19 17:23:10,650 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-19 17:23:10,650 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-19 17:23:10,650 INFO L138 SettingsManager]: * Use SBE=true [2022-07-19 17:23:10,651 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-19 17:23:10,651 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-19 17:23:10,651 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-19 17:23:10,651 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-19 17:23:10,651 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-19 17:23:10,652 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-19 17:23:10,652 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-19 17:23:10,652 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-19 17:23:10,652 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-19 17:23:10,652 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-19 17:23:10,652 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-19 17:23:10,653 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-19 17:23:10,653 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-19 17:23:10,653 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-19 17:23:10,653 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-19 17:23:10,653 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:23:10,654 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-19 17:23:10,654 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-19 17:23:10,654 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-19 17:23:10,654 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-19 17:23:10,654 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-19 17:23:10,655 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-19 17:23:10,655 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-19 17:23:10,655 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-19 17:23:10,655 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9a8ef44eebf77bb9089ba7256f54c924b643d97224560b14ff4a2b7df3dcc9e0 [2022-07-19 17:23:10,869 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-19 17:23:10,892 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-19 17:23:10,894 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-19 17:23:10,895 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-19 17:23:10,895 INFO L275 PluginConnector]: CDTParser initialized [2022-07-19 17:23:10,896 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c [2022-07-19 17:23:10,954 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0263c0adb/7d2454b555124ba6bf99a77b09c1da92/FLAG0d86ce58d [2022-07-19 17:23:11,424 INFO L306 CDTParser]: Found 1 translation units. [2022-07-19 17:23:11,427 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c [2022-07-19 17:23:11,437 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0263c0adb/7d2454b555124ba6bf99a77b09c1da92/FLAG0d86ce58d [2022-07-19 17:23:11,766 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0263c0adb/7d2454b555124ba6bf99a77b09c1da92 [2022-07-19 17:23:11,768 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-19 17:23:11,770 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-19 17:23:11,773 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-19 17:23:11,773 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-19 17:23:11,776 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-19 17:23:11,777 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:23:11" (1/1) ... [2022-07-19 17:23:11,778 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@275abf0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:11, skipping insertion in model container [2022-07-19 17:23:11,778 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:23:11" (1/1) ... [2022-07-19 17:23:11,783 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-19 17:23:11,816 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-19 17:23:11,976 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c[3064,3077] [2022-07-19 17:23:12,059 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:23:12,071 INFO L203 MainTranslator]: Completed pre-run [2022-07-19 17:23:12,103 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product45.cil.c[3064,3077] [2022-07-19 17:23:12,170 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:23:12,184 INFO L208 MainTranslator]: Completed translation [2022-07-19 17:23:12,185 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:12 WrapperNode [2022-07-19 17:23:12,185 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-19 17:23:12,186 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-19 17:23:12,187 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-19 17:23:12,187 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-19 17:23:12,193 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:12" (1/1) ... [2022-07-19 17:23:12,206 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:12" (1/1) ... [2022-07-19 17:23:12,227 INFO L137 Inliner]: procedures = 54, calls = 155, calls flagged for inlining = 21, calls inlined = 18, statements flattened = 238 [2022-07-19 17:23:12,227 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-19 17:23:12,228 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-19 17:23:12,228 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-19 17:23:12,229 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-19 17:23:12,236 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:12" (1/1) ... [2022-07-19 17:23:12,236 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:12" (1/1) ... [2022-07-19 17:23:12,244 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:12" (1/1) ... [2022-07-19 17:23:12,245 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:12" (1/1) ... [2022-07-19 17:23:12,256 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:12" (1/1) ... [2022-07-19 17:23:12,261 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:12" (1/1) ... [2022-07-19 17:23:12,276 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:12" (1/1) ... [2022-07-19 17:23:12,279 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-19 17:23:12,279 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-19 17:23:12,280 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-19 17:23:12,280 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-19 17:23:12,281 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:12" (1/1) ... [2022-07-19 17:23:12,287 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:23:12,298 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:23:12,309 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-19 17:23:12,311 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-19 17:23:12,338 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-19 17:23:12,338 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-19 17:23:12,338 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-19 17:23:12,338 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-19 17:23:12,338 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-19 17:23:12,338 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-19 17:23:12,339 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-19 17:23:12,339 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-19 17:23:12,339 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-19 17:23:12,339 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-19 17:23:12,339 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-19 17:23:12,339 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-19 17:23:12,340 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-19 17:23:12,340 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-19 17:23:12,340 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-19 17:23:12,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-19 17:23:12,340 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-19 17:23:12,340 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-19 17:23:12,341 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-19 17:23:12,341 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-19 17:23:12,397 INFO L234 CfgBuilder]: Building ICFG [2022-07-19 17:23:12,399 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-19 17:23:12,679 INFO L275 CfgBuilder]: Performing block encoding [2022-07-19 17:23:12,685 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-19 17:23:12,685 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-19 17:23:12,687 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:23:12 BoogieIcfgContainer [2022-07-19 17:23:12,687 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-19 17:23:12,689 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-19 17:23:12,689 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-19 17:23:12,701 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-19 17:23:12,701 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.07 05:23:11" (1/3) ... [2022-07-19 17:23:12,702 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@f4a093 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:23:12, skipping insertion in model container [2022-07-19 17:23:12,702 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:12" (2/3) ... [2022-07-19 17:23:12,702 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@f4a093 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:23:12, skipping insertion in model container [2022-07-19 17:23:12,702 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:23:12" (3/3) ... [2022-07-19 17:23:12,703 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product45.cil.c [2022-07-19 17:23:12,713 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-19 17:23:12,714 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-19 17:23:12,752 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-19 17:23:12,757 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@b0874b4, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@17f3dbf6 [2022-07-19 17:23:12,758 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-19 17:23:12,761 INFO L276 IsEmpty]: Start isEmpty. Operand has 93 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 77 states have internal predecessors, (95), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-19 17:23:12,769 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-07-19 17:23:12,769 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:12,770 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:12,770 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:12,774 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:12,774 INFO L85 PathProgramCache]: Analyzing trace with hash 775812870, now seen corresponding path program 1 times [2022-07-19 17:23:12,794 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:12,794 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1785295492] [2022-07-19 17:23:12,795 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:12,795 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:12,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:12,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-19 17:23:12,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:12,945 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:23:12,946 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:12,946 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1785295492] [2022-07-19 17:23:12,946 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1785295492] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:12,947 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:12,947 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-19 17:23:12,948 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [165049749] [2022-07-19 17:23:12,949 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:12,952 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-19 17:23:12,952 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:12,973 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-19 17:23:12,974 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:23:12,976 INFO L87 Difference]: Start difference. First operand has 93 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 77 states have internal predecessors, (95), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:23:13,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:13,023 INFO L93 Difference]: Finished difference Result 178 states and 241 transitions. [2022-07-19 17:23:13,024 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-19 17:23:13,025 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-07-19 17:23:13,025 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:13,033 INFO L225 Difference]: With dead ends: 178 [2022-07-19 17:23:13,033 INFO L226 Difference]: Without dead ends: 84 [2022-07-19 17:23:13,036 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:23:13,038 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:13,039 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 117 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:23:13,055 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-07-19 17:23:13,084 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2022-07-19 17:23:13,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-19 17:23:13,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 108 transitions. [2022-07-19 17:23:13,088 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 108 transitions. Word has length 23 [2022-07-19 17:23:13,088 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:13,089 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 108 transitions. [2022-07-19 17:23:13,089 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:23:13,089 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 108 transitions. [2022-07-19 17:23:13,091 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-07-19 17:23:13,091 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:13,091 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:13,091 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-19 17:23:13,092 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:13,092 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:13,092 INFO L85 PathProgramCache]: Analyzing trace with hash 1120816717, now seen corresponding path program 1 times [2022-07-19 17:23:13,093 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:13,093 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [729456927] [2022-07-19 17:23:13,093 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:13,093 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:13,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:13,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:23:13,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:13,166 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:23:13,166 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:13,167 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [729456927] [2022-07-19 17:23:13,167 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [729456927] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:13,167 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:13,167 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-19 17:23:13,167 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1545731249] [2022-07-19 17:23:13,167 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:13,172 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:23:13,173 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:13,174 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:23:13,174 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:23:13,174 INFO L87 Difference]: Start difference. First operand 84 states and 108 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:23:13,191 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:13,192 INFO L93 Difference]: Finished difference Result 134 states and 172 transitions. [2022-07-19 17:23:13,194 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:23:13,194 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-07-19 17:23:13,194 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:13,195 INFO L225 Difference]: With dead ends: 134 [2022-07-19 17:23:13,196 INFO L226 Difference]: Without dead ends: 75 [2022-07-19 17:23:13,196 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:23:13,198 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 12 mSDsluCounter, 79 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 174 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:13,198 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 174 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:23:13,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-07-19 17:23:13,207 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-07-19 17:23:13,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-19 17:23:13,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 96 transitions. [2022-07-19 17:23:13,208 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 96 transitions. Word has length 24 [2022-07-19 17:23:13,208 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:13,209 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 96 transitions. [2022-07-19 17:23:13,209 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:23:13,209 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2022-07-19 17:23:13,210 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-07-19 17:23:13,211 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:13,211 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:13,211 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-19 17:23:13,211 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:13,212 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:13,212 INFO L85 PathProgramCache]: Analyzing trace with hash 1182721273, now seen corresponding path program 1 times [2022-07-19 17:23:13,212 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:13,212 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1646929994] [2022-07-19 17:23:13,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:13,212 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:13,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:13,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:23:13,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:13,273 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:23:13,273 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:13,273 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1646929994] [2022-07-19 17:23:13,274 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1646929994] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:13,274 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:13,274 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-19 17:23:13,274 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134534466] [2022-07-19 17:23:13,274 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:13,275 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:23:13,275 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:13,275 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:23:13,276 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:23:13,276 INFO L87 Difference]: Start difference. First operand 75 states and 96 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:23:13,289 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:13,289 INFO L93 Difference]: Finished difference Result 143 states and 186 transitions. [2022-07-19 17:23:13,289 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:23:13,289 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2022-07-19 17:23:13,290 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:13,291 INFO L225 Difference]: With dead ends: 143 [2022-07-19 17:23:13,291 INFO L226 Difference]: Without dead ends: 75 [2022-07-19 17:23:13,292 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:23:13,293 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 78 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:13,293 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 94 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:23:13,294 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-07-19 17:23:13,300 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-07-19 17:23:13,300 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 63 states have internal predecessors, (73), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-19 17:23:13,301 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 95 transitions. [2022-07-19 17:23:13,302 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 95 transitions. Word has length 28 [2022-07-19 17:23:13,302 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:13,302 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 95 transitions. [2022-07-19 17:23:13,302 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:23:13,302 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 95 transitions. [2022-07-19 17:23:13,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-19 17:23:13,304 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:13,304 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:13,304 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-19 17:23:13,304 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:13,305 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:13,305 INFO L85 PathProgramCache]: Analyzing trace with hash 2028009394, now seen corresponding path program 1 times [2022-07-19 17:23:13,305 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:13,305 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [813401077] [2022-07-19 17:23:13,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:13,306 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:13,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:13,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:23:13,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:13,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:23:13,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:13,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-19 17:23:13,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:13,387 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:23:13,389 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:13,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [813401077] [2022-07-19 17:23:13,390 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [813401077] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:13,390 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:13,391 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-19 17:23:13,391 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1732542833] [2022-07-19 17:23:13,391 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:13,392 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-19 17:23:13,393 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:13,393 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-19 17:23:13,393 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-19 17:23:13,394 INFO L87 Difference]: Start difference. First operand 75 states and 95 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-19 17:23:13,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:13,634 INFO L93 Difference]: Finished difference Result 220 states and 277 transitions. [2022-07-19 17:23:13,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-19 17:23:13,635 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 38 [2022-07-19 17:23:13,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:13,636 INFO L225 Difference]: With dead ends: 220 [2022-07-19 17:23:13,636 INFO L226 Difference]: Without dead ends: 152 [2022-07-19 17:23:13,637 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-07-19 17:23:13,639 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 169 mSDsluCounter, 154 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 279 SdHoareTripleChecker+Invalid, 167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:13,639 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [171 Valid, 279 Invalid, 167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:23:13,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2022-07-19 17:23:13,653 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 146. [2022-07-19 17:23:13,654 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 109 states have (on average 1.2477064220183487) internal successors, (136), 117 states have internal predecessors, (136), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-07-19 17:23:13,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 177 transitions. [2022-07-19 17:23:13,656 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 177 transitions. Word has length 38 [2022-07-19 17:23:13,656 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:13,656 INFO L495 AbstractCegarLoop]: Abstraction has 146 states and 177 transitions. [2022-07-19 17:23:13,656 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-19 17:23:13,657 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 177 transitions. [2022-07-19 17:23:13,658 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-19 17:23:13,658 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:13,658 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:13,658 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-19 17:23:13,658 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:13,659 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:13,659 INFO L85 PathProgramCache]: Analyzing trace with hash 300684586, now seen corresponding path program 1 times [2022-07-19 17:23:13,659 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:13,659 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [133526134] [2022-07-19 17:23:13,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:13,660 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:13,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:13,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:23:13,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:13,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:23:13,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:13,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-07-19 17:23:13,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:13,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:23:13,743 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:13,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [133526134] [2022-07-19 17:23:13,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [133526134] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:13,743 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:13,743 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:23:13,743 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1914344600] [2022-07-19 17:23:13,743 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:13,744 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:23:13,744 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:13,744 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:23:13,744 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:23:13,745 INFO L87 Difference]: Start difference. First operand 146 states and 177 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-19 17:23:13,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:14,000 INFO L93 Difference]: Finished difference Result 428 states and 529 transitions. [2022-07-19 17:23:14,000 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-19 17:23:14,001 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 44 [2022-07-19 17:23:14,001 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:14,009 INFO L225 Difference]: With dead ends: 428 [2022-07-19 17:23:14,009 INFO L226 Difference]: Without dead ends: 289 [2022-07-19 17:23:14,014 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-07-19 17:23:14,018 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 146 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 227 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 395 SdHoareTripleChecker+Invalid, 282 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 227 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:14,020 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [155 Valid, 395 Invalid, 282 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 227 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:23:14,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 289 states. [2022-07-19 17:23:14,064 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 289 to 275. [2022-07-19 17:23:14,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 275 states, 202 states have (on average 1.2178217821782178) internal successors, (246), 217 states have internal predecessors, (246), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-07-19 17:23:14,070 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 275 states to 275 states and 330 transitions. [2022-07-19 17:23:14,070 INFO L78 Accepts]: Start accepts. Automaton has 275 states and 330 transitions. Word has length 44 [2022-07-19 17:23:14,070 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:14,071 INFO L495 AbstractCegarLoop]: Abstraction has 275 states and 330 transitions. [2022-07-19 17:23:14,071 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-19 17:23:14,071 INFO L276 IsEmpty]: Start isEmpty. Operand 275 states and 330 transitions. [2022-07-19 17:23:14,077 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-07-19 17:23:14,079 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:14,079 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:14,079 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-19 17:23:14,079 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:14,080 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:14,080 INFO L85 PathProgramCache]: Analyzing trace with hash 1931130382, now seen corresponding path program 1 times [2022-07-19 17:23:14,081 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:14,081 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1808855051] [2022-07-19 17:23:14,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:14,081 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:14,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:14,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:23:14,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:14,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:23:14,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:14,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:23:14,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:14,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-07-19 17:23:14,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:14,205 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:23:14,205 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:14,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1808855051] [2022-07-19 17:23:14,206 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1808855051] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:14,206 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:14,206 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:23:14,206 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1765390168] [2022-07-19 17:23:14,206 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:14,207 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:23:14,207 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:14,207 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:23:14,208 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:23:14,208 INFO L87 Difference]: Start difference. First operand 275 states and 330 transitions. Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-19 17:23:14,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:14,602 INFO L93 Difference]: Finished difference Result 291 states and 346 transitions. [2022-07-19 17:23:14,603 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-07-19 17:23:14,603 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 48 [2022-07-19 17:23:14,604 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:14,605 INFO L225 Difference]: With dead ends: 291 [2022-07-19 17:23:14,605 INFO L226 Difference]: Without dead ends: 289 [2022-07-19 17:23:14,606 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2022-07-19 17:23:14,607 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 183 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 364 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 185 SdHoareTripleChecker+Valid, 195 SdHoareTripleChecker+Invalid, 434 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 364 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:14,607 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [185 Valid, 195 Invalid, 434 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 364 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-19 17:23:14,608 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 289 states. [2022-07-19 17:23:14,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 289 to 275. [2022-07-19 17:23:14,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 275 states, 202 states have (on average 1.2079207920792079) internal successors, (244), 217 states have internal predecessors, (244), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-07-19 17:23:14,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 275 states to 275 states and 328 transitions. [2022-07-19 17:23:14,628 INFO L78 Accepts]: Start accepts. Automaton has 275 states and 328 transitions. Word has length 48 [2022-07-19 17:23:14,629 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:14,629 INFO L495 AbstractCegarLoop]: Abstraction has 275 states and 328 transitions. [2022-07-19 17:23:14,629 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-19 17:23:14,629 INFO L276 IsEmpty]: Start isEmpty. Operand 275 states and 328 transitions. [2022-07-19 17:23:14,630 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-07-19 17:23:14,630 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:14,630 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:14,631 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-19 17:23:14,631 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:14,631 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:14,631 INFO L85 PathProgramCache]: Analyzing trace with hash -420556161, now seen corresponding path program 1 times [2022-07-19 17:23:14,632 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:14,632 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [675538023] [2022-07-19 17:23:14,632 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:14,632 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:14,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:14,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:23:14,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:14,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:23:14,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:14,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:23:14,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:14,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:23:14,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:14,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-19 17:23:14,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:14,694 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:23:14,694 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:14,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [675538023] [2022-07-19 17:23:14,694 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [675538023] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:14,694 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:14,695 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:23:14,695 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2134642582] [2022-07-19 17:23:14,695 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:14,695 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:23:14,696 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:14,696 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:23:14,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:23:14,696 INFO L87 Difference]: Start difference. First operand 275 states and 328 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-19 17:23:14,966 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:14,966 INFO L93 Difference]: Finished difference Result 561 states and 682 transitions. [2022-07-19 17:23:14,966 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-19 17:23:14,967 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2022-07-19 17:23:14,967 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:14,970 INFO L225 Difference]: With dead ends: 561 [2022-07-19 17:23:14,972 INFO L226 Difference]: Without dead ends: 293 [2022-07-19 17:23:14,973 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-19 17:23:14,975 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 118 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 305 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 119 SdHoareTripleChecker+Valid, 192 SdHoareTripleChecker+Invalid, 357 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 305 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:14,975 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [119 Valid, 192 Invalid, 357 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 305 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:23:14,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 293 states. [2022-07-19 17:23:15,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 293 to 281. [2022-07-19 17:23:15,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 281 states, 208 states have (on average 1.2019230769230769) internal successors, (250), 223 states have internal predecessors, (250), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-07-19 17:23:15,006 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 281 states to 281 states and 334 transitions. [2022-07-19 17:23:15,007 INFO L78 Accepts]: Start accepts. Automaton has 281 states and 334 transitions. Word has length 58 [2022-07-19 17:23:15,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:15,013 INFO L495 AbstractCegarLoop]: Abstraction has 281 states and 334 transitions. [2022-07-19 17:23:15,014 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-19 17:23:15,014 INFO L276 IsEmpty]: Start isEmpty. Operand 281 states and 334 transitions. [2022-07-19 17:23:15,015 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-07-19 17:23:15,015 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:15,016 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:15,016 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-19 17:23:15,016 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:15,017 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:15,017 INFO L85 PathProgramCache]: Analyzing trace with hash -397923907, now seen corresponding path program 1 times [2022-07-19 17:23:15,017 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:15,017 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1935643683] [2022-07-19 17:23:15,017 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:15,018 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:15,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:23:15,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:23:15,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:23:15,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:23:15,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-19 17:23:15,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,142 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:23:15,142 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:15,142 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1935643683] [2022-07-19 17:23:15,143 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1935643683] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:15,143 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:15,143 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:23:15,143 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [379101908] [2022-07-19 17:23:15,143 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:15,144 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:23:15,144 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:15,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:23:15,145 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:23:15,145 INFO L87 Difference]: Start difference. First operand 281 states and 334 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-19 17:23:15,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:15,359 INFO L93 Difference]: Finished difference Result 573 states and 694 transitions. [2022-07-19 17:23:15,360 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-19 17:23:15,360 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 58 [2022-07-19 17:23:15,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:15,363 INFO L225 Difference]: With dead ends: 573 [2022-07-19 17:23:15,363 INFO L226 Difference]: Without dead ends: 299 [2022-07-19 17:23:15,364 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-19 17:23:15,366 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 191 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 220 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 193 SdHoareTripleChecker+Valid, 168 SdHoareTripleChecker+Invalid, 294 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 220 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:15,366 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [193 Valid, 168 Invalid, 294 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 220 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:23:15,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2022-07-19 17:23:15,384 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 285. [2022-07-19 17:23:15,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 212 states have (on average 1.1981132075471699) internal successors, (254), 227 states have internal predecessors, (254), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-07-19 17:23:15,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 338 transitions. [2022-07-19 17:23:15,388 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 338 transitions. Word has length 58 [2022-07-19 17:23:15,389 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:15,390 INFO L495 AbstractCegarLoop]: Abstraction has 285 states and 338 transitions. [2022-07-19 17:23:15,390 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-19 17:23:15,391 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 338 transitions. [2022-07-19 17:23:15,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-07-19 17:23:15,392 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:15,392 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:15,392 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-19 17:23:15,393 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:15,393 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:15,393 INFO L85 PathProgramCache]: Analyzing trace with hash -123164293, now seen corresponding path program 1 times [2022-07-19 17:23:15,393 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:15,393 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [510187254] [2022-07-19 17:23:15,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:15,394 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:15,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-19 17:23:15,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-19 17:23:15,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:23:15,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:23:15,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-19 17:23:15,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,474 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:23:15,474 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:15,474 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [510187254] [2022-07-19 17:23:15,474 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [510187254] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:15,474 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:15,475 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:23:15,475 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [77133143] [2022-07-19 17:23:15,475 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:15,475 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:23:15,476 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:15,476 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:23:15,476 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:23:15,476 INFO L87 Difference]: Start difference. First operand 285 states and 338 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-19 17:23:15,776 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:15,776 INFO L93 Difference]: Finished difference Result 785 states and 984 transitions. [2022-07-19 17:23:15,777 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-19 17:23:15,777 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 58 [2022-07-19 17:23:15,777 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:15,780 INFO L225 Difference]: With dead ends: 785 [2022-07-19 17:23:15,780 INFO L226 Difference]: Without dead ends: 507 [2022-07-19 17:23:15,781 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-19 17:23:15,782 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 289 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 264 mSolverCounterSat, 129 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 291 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 393 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 129 IncrementalHoareTripleChecker+Valid, 264 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:15,782 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [291 Valid, 224 Invalid, 393 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [129 Valid, 264 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:23:15,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 507 states. [2022-07-19 17:23:15,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 507 to 505. [2022-07-19 17:23:15,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 505 states, 376 states have (on average 1.1941489361702127) internal successors, (449), 399 states have internal predecessors, (449), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) [2022-07-19 17:23:15,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 505 states to 505 states and 616 transitions. [2022-07-19 17:23:15,821 INFO L78 Accepts]: Start accepts. Automaton has 505 states and 616 transitions. Word has length 58 [2022-07-19 17:23:15,821 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:15,821 INFO L495 AbstractCegarLoop]: Abstraction has 505 states and 616 transitions. [2022-07-19 17:23:15,822 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-19 17:23:15,822 INFO L276 IsEmpty]: Start isEmpty. Operand 505 states and 616 transitions. [2022-07-19 17:23:15,823 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-07-19 17:23:15,823 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:15,823 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:15,823 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-19 17:23:15,824 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:15,824 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:15,824 INFO L85 PathProgramCache]: Analyzing trace with hash -2137470559, now seen corresponding path program 1 times [2022-07-19 17:23:15,824 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:15,824 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [336213356] [2022-07-19 17:23:15,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:15,825 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:15,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-19 17:23:15,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-19 17:23:15,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-19 17:23:15,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:23:15,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:23:15,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2022-07-19 17:23:15,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:15,944 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-19 17:23:15,944 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:15,944 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [336213356] [2022-07-19 17:23:15,944 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [336213356] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:23:15,944 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1096447592] [2022-07-19 17:23:15,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:15,945 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:23:15,945 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:23:15,947 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:23:15,982 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-19 17:23:16,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,046 INFO L263 TraceCheckSpWp]: Trace formula consists of 382 conjuncts, 9 conjunts are in the unsatisfiable core [2022-07-19 17:23:16,052 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:23:16,344 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:23:16,347 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-19 17:23:16,348 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1096447592] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:16,348 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-19 17:23:16,348 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2022-07-19 17:23:16,348 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2031310995] [2022-07-19 17:23:16,349 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:16,349 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-19 17:23:16,349 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:16,350 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-19 17:23:16,350 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2022-07-19 17:23:16,351 INFO L87 Difference]: Start difference. First operand 505 states and 616 transitions. Second operand has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-07-19 17:23:16,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:16,481 INFO L93 Difference]: Finished difference Result 982 states and 1203 transitions. [2022-07-19 17:23:16,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-19 17:23:16,482 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 62 [2022-07-19 17:23:16,482 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:16,485 INFO L225 Difference]: With dead ends: 982 [2022-07-19 17:23:16,485 INFO L226 Difference]: Without dead ends: 484 [2022-07-19 17:23:16,487 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2022-07-19 17:23:16,488 INFO L413 NwaCegarLoop]: 170 mSDtfsCounter, 59 mSDsluCounter, 625 mSDsCounter, 0 mSdLazyCounter, 158 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 795 SdHoareTripleChecker+Invalid, 161 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 158 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:16,489 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 795 Invalid, 161 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 158 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:23:16,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 484 states. [2022-07-19 17:23:16,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 484 to 482. [2022-07-19 17:23:16,520 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 482 states, 358 states have (on average 1.1787709497206704) internal successors, (422), 380 states have internal predecessors, (422), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) [2022-07-19 17:23:16,522 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 482 states to 482 states and 574 transitions. [2022-07-19 17:23:16,523 INFO L78 Accepts]: Start accepts. Automaton has 482 states and 574 transitions. Word has length 62 [2022-07-19 17:23:16,523 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:16,523 INFO L495 AbstractCegarLoop]: Abstraction has 482 states and 574 transitions. [2022-07-19 17:23:16,524 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-07-19 17:23:16,524 INFO L276 IsEmpty]: Start isEmpty. Operand 482 states and 574 transitions. [2022-07-19 17:23:16,526 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2022-07-19 17:23:16,526 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:16,526 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:16,550 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-07-19 17:23:16,741 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-19 17:23:16,741 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:16,742 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:16,742 INFO L85 PathProgramCache]: Analyzing trace with hash 1836694146, now seen corresponding path program 1 times [2022-07-19 17:23:16,742 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:16,742 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1653573137] [2022-07-19 17:23:16,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:16,742 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:16,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-19 17:23:16,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-19 17:23:16,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:23:16,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:23:16,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:23:16,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-19 17:23:16,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-07-19 17:23:16,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-07-19 17:23:16,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:23:16,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-07-19 17:23:16,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:23:16,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2022-07-19 17:23:16,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:16,909 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-07-19 17:23:16,909 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:16,909 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1653573137] [2022-07-19 17:23:16,910 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1653573137] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:23:16,910 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2102544200] [2022-07-19 17:23:16,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:16,910 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:23:16,910 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:23:16,911 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:23:16,941 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-19 17:23:17,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:17,012 INFO L263 TraceCheckSpWp]: Trace formula consists of 481 conjuncts, 9 conjunts are in the unsatisfiable core [2022-07-19 17:23:17,016 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:23:17,124 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-19 17:23:17,124 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-19 17:23:17,124 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2102544200] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:17,124 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-19 17:23:17,124 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2022-07-19 17:23:17,125 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2031199150] [2022-07-19 17:23:17,125 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:17,125 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-19 17:23:17,125 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:17,126 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-19 17:23:17,126 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-07-19 17:23:17,126 INFO L87 Difference]: Start difference. First operand 482 states and 574 transitions. Second operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-07-19 17:23:17,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:17,222 INFO L93 Difference]: Finished difference Result 825 states and 993 transitions. [2022-07-19 17:23:17,222 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-19 17:23:17,222 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 106 [2022-07-19 17:23:17,223 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:17,223 INFO L225 Difference]: With dead ends: 825 [2022-07-19 17:23:17,223 INFO L226 Difference]: Without dead ends: 0 [2022-07-19 17:23:17,225 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2022-07-19 17:23:17,226 INFO L413 NwaCegarLoop]: 171 mSDtfsCounter, 68 mSDsluCounter, 765 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 936 SdHoareTripleChecker+Invalid, 112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:17,226 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 936 Invalid, 112 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:23:17,226 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-19 17:23:17,227 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-19 17:23:17,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:23:17,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-19 17:23:17,227 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 106 [2022-07-19 17:23:17,227 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:17,227 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-19 17:23:17,228 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-07-19 17:23:17,228 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-19 17:23:17,228 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-19 17:23:17,230 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-19 17:23:17,258 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-19 17:23:17,445 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-19 17:23:17,447 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-19 17:23:20,147 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 784 790) no Hoare annotation was computed. [2022-07-19 17:23:20,147 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 784 790) the Hoare annotation is: true [2022-07-19 17:23:20,147 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (not (<= 1 |old(~methaneLevelCritical~0)|))))) [2022-07-19 17:23:20,147 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2022-07-19 17:23:20,147 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2022-07-19 17:23:20,148 INFO L895 garLoopResultBuilder]: At program point L832(line 832) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))) (not (= ~methaneLevelCritical~0 0))))) [2022-07-19 17:23:20,148 INFO L899 garLoopResultBuilder]: For program point L155(line 155) no Hoare annotation was computed. [2022-07-19 17:23:20,148 INFO L895 garLoopResultBuilder]: At program point L824(line 824) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-07-19 17:23:20,148 INFO L899 garLoopResultBuilder]: For program point L824-1(line 824) no Hoare annotation was computed. [2022-07-19 17:23:20,148 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 760 783) no Hoare annotation was computed. [2022-07-19 17:23:20,148 INFO L895 garLoopResultBuilder]: At program point L837(line 837) the Hoare annotation is: (let ((.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse5 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or .cse4 .cse0 .cse3 .cse5) (or .cse4 .cse0 .cse1 .cse5) (or .cse0 .cse6 .cse3 .cse7) (or .cse0 .cse6 .cse1 .cse7))) [2022-07-19 17:23:20,149 INFO L895 garLoopResultBuilder]: At program point L837-1(lines 818 842) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse8 .cse9 .cse2 .cse6 .cse5) (or .cse0 .cse2 .cse6 .cse5 .cse7) (or .cse2 (and .cse9 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse3 (and .cse8 .cse9)))) [2022-07-19 17:23:20,149 INFO L899 garLoopResultBuilder]: For program point L771-1(lines 771 777) no Hoare annotation was computed. [2022-07-19 17:23:20,149 INFO L895 garLoopResultBuilder]: At program point L156(lines 151 158) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-07-19 17:23:20,149 INFO L899 garLoopResultBuilder]: For program point L173(lines 173 179) no Hoare annotation was computed. [2022-07-19 17:23:20,149 INFO L899 garLoopResultBuilder]: For program point L169(lines 169 182) no Hoare annotation was computed. [2022-07-19 17:23:20,149 INFO L895 garLoopResultBuilder]: At program point L169-1(lines 161 185) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (.cse12 (<= 2 ~waterLevel~0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse6 (and .cse9 .cse12)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (and .cse0 .cse8 (<= 1 |timeShift_processEnvironment_~tmp~7#1|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse5 .cse7) (or .cse2 .cse6 (and .cse8 .cse9) .cse5 (and .cse10 .cse9)) (or .cse11 .cse2 .cse3 (and .cse10 .cse8)) (or .cse11 .cse2 .cse12 .cse3 .cse7)))) [2022-07-19 17:23:20,149 INFO L895 garLoopResultBuilder]: At program point L892(lines 887 895) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= ~waterLevel~0 1)) (or .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_isPumpRunning_#res#1| 0))) (or (and .cse3 .cse4 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse4) .cse2)) (or .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-07-19 17:23:20,150 INFO L899 garLoopResultBuilder]: For program point L764-1(lines 763 782) no Hoare annotation was computed. [2022-07-19 17:23:20,150 INFO L899 garLoopResultBuilder]: For program point L826(lines 826 834) no Hoare annotation was computed. [2022-07-19 17:23:20,150 INFO L899 garLoopResultBuilder]: For program point L822(lines 822 839) no Hoare annotation was computed. [2022-07-19 17:23:20,150 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-07-19 17:23:20,150 INFO L895 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-07-19 17:23:20,150 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 760 783) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse6 .cse2 .cse5) (or .cse6 .cse2 .cse3) (or .cse2 .cse7 .cse3 .cse8) (or .cse2 .cse7 .cse5 .cse8))) [2022-07-19 17:23:20,150 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 760 783) no Hoare annotation was computed. [2022-07-19 17:23:20,151 INFO L895 garLoopResultBuilder]: At program point L873(lines 868 875) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or (and .cse0 .cse1 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse2 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 .cse2 .cse3) (or .cse1 .cse2 .cse3))) [2022-07-19 17:23:20,151 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 155) no Hoare annotation was computed. [2022-07-19 17:23:20,151 INFO L895 garLoopResultBuilder]: At program point L167(line 167) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse8 .cse9 .cse2 .cse6 .cse5) (or .cse0 .cse2 .cse6 .cse5 .cse7) (or .cse2 (and .cse9 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse3 (and .cse8 .cse9)))) [2022-07-19 17:23:20,151 INFO L899 garLoopResultBuilder]: For program point L167-1(line 167) no Hoare annotation was computed. [2022-07-19 17:23:20,151 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 189 218) no Hoare annotation was computed. [2022-07-19 17:23:20,151 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 189 218) the Hoare annotation is: true [2022-07-19 17:23:20,151 INFO L902 garLoopResultBuilder]: At program point L214(lines 189 218) the Hoare annotation is: true [2022-07-19 17:23:20,151 INFO L899 garLoopResultBuilder]: For program point L210(line 210) no Hoare annotation was computed. [2022-07-19 17:23:20,151 INFO L899 garLoopResultBuilder]: For program point L203(lines 203 207) no Hoare annotation was computed. [2022-07-19 17:23:20,151 INFO L902 garLoopResultBuilder]: At program point L203-1(lines 203 207) the Hoare annotation is: true [2022-07-19 17:23:20,151 INFO L899 garLoopResultBuilder]: For program point L200(line 200) no Hoare annotation was computed. [2022-07-19 17:23:20,152 INFO L902 garLoopResultBuilder]: At program point L199-2(lines 199 213) the Hoare annotation is: true [2022-07-19 17:23:20,152 INFO L902 garLoopResultBuilder]: At program point L195(line 195) the Hoare annotation is: true [2022-07-19 17:23:20,152 INFO L899 garLoopResultBuilder]: For program point L195-1(line 195) no Hoare annotation was computed. [2022-07-19 17:23:20,152 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 95 103) the Hoare annotation is: true [2022-07-19 17:23:20,152 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 95 103) no Hoare annotation was computed. [2022-07-19 17:23:20,152 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2022-07-19 17:23:20,152 INFO L899 garLoopResultBuilder]: For program point L275(lines 275 282) no Hoare annotation was computed. [2022-07-19 17:23:20,153 INFO L899 garLoopResultBuilder]: For program point L275-2(lines 275 282) no Hoare annotation was computed. [2022-07-19 17:23:20,153 INFO L895 garLoopResultBuilder]: At program point L304(lines 300 306) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:23:20,153 INFO L895 garLoopResultBuilder]: At program point L746(lines 699 747) the Hoare annotation is: false [2022-07-19 17:23:20,153 INFO L902 garLoopResultBuilder]: At program point L259(lines 252 261) the Hoare annotation is: true [2022-07-19 17:23:20,153 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-19 17:23:20,153 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-19 17:23:20,153 INFO L899 garLoopResultBuilder]: For program point L701(lines 700 745) no Hoare annotation was computed. [2022-07-19 17:23:20,153 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-19 17:23:20,154 INFO L902 garLoopResultBuilder]: At program point L284(lines 265 287) the Hoare annotation is: true [2022-07-19 17:23:20,154 INFO L899 garLoopResultBuilder]: For program point L730(lines 730 741) no Hoare annotation was computed. [2022-07-19 17:23:20,154 INFO L895 garLoopResultBuilder]: At program point L722(line 722) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-07-19 17:23:20,154 INFO L895 garLoopResultBuilder]: At program point L743(lines 700 745) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-07-19 17:23:20,154 INFO L899 garLoopResultBuilder]: For program point L710(lines 710 716) no Hoare annotation was computed. [2022-07-19 17:23:20,154 INFO L899 garLoopResultBuilder]: For program point L710-1(lines 710 716) no Hoare annotation was computed. [2022-07-19 17:23:20,154 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-19 17:23:20,154 INFO L899 garLoopResultBuilder]: For program point L702(lines 702 706) no Hoare annotation was computed. [2022-07-19 17:23:20,155 INFO L895 garLoopResultBuilder]: At program point L248(lines 244 250) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:23:20,155 INFO L899 garLoopResultBuilder]: For program point L736(lines 736 740) no Hoare annotation was computed. [2022-07-19 17:23:20,155 INFO L895 garLoopResultBuilder]: At program point L319(lines 314 322) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:23:20,155 INFO L895 garLoopResultBuilder]: At program point L736-2(lines 730 741) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-07-19 17:23:20,155 INFO L895 garLoopResultBuilder]: At program point L311(lines 307 313) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:23:20,155 INFO L899 garLoopResultBuilder]: For program point L720(lines 720 726) no Hoare annotation was computed. [2022-07-19 17:23:20,155 INFO L899 garLoopResultBuilder]: For program point L720-1(lines 720 726) no Hoare annotation was computed. [2022-07-19 17:23:20,156 INFO L902 garLoopResultBuilder]: At program point L749(lines 690 753) the Hoare annotation is: true [2022-07-19 17:23:20,156 INFO L895 garLoopResultBuilder]: At program point L712(line 712) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-07-19 17:23:20,156 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2022-07-19 17:23:20,156 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2022-07-19 17:23:20,156 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse5 .cse7) (or .cse2 .cse6 .cse3 .cse7))) [2022-07-19 17:23:20,156 INFO L895 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse5)) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or (not .cse1) .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4)))) [2022-07-19 17:23:20,156 INFO L895 garLoopResultBuilder]: At program point L806(line 806) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |processEnvironment__wrappee__methaneQuery_~tmp~6#1| 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2022-07-19 17:23:20,156 INFO L899 garLoopResultBuilder]: For program point L800(lines 800 808) no Hoare annotation was computed. [2022-07-19 17:23:20,156 INFO L899 garLoopResultBuilder]: For program point L796(lines 796 813) no Hoare annotation was computed. [2022-07-19 17:23:20,157 INFO L899 garLoopResultBuilder]: For program point L858(lines 858 864) no Hoare annotation was computed. [2022-07-19 17:23:20,157 INFO L895 garLoopResultBuilder]: At program point L856(line 856) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2)) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2022-07-19 17:23:20,157 INFO L895 garLoopResultBuilder]: At program point L858-2(lines 851 867) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~8#1|) (= ~pumpRunning~0 0) .cse3) (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 .cse3 .cse2))) [2022-07-19 17:23:20,157 INFO L899 garLoopResultBuilder]: For program point L856-1(line 856) no Hoare annotation was computed. [2022-07-19 17:23:20,157 INFO L895 garLoopResultBuilder]: At program point L947(lines 932 950) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse5 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse5)) (.cse4 (and .cse1 .cse2 .cse5 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2 .cse3) (not (= ~methaneLevelCritical~0 0)) .cse4) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and .cse2 .cse3))))) [2022-07-19 17:23:20,157 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 792 816) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-07-19 17:23:20,158 INFO L895 garLoopResultBuilder]: At program point L848(lines 843 850) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (<= 2 ~waterLevel~0) .cse2))) [2022-07-19 17:23:20,158 INFO L899 garLoopResultBuilder]: For program point L941(lines 941 945) no Hoare annotation was computed. [2022-07-19 17:23:20,158 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-07-19 17:23:20,158 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 792 816) no Hoare annotation was computed. [2022-07-19 17:23:20,158 INFO L899 garLoopResultBuilder]: For program point L941-2(lines 941 945) no Hoare annotation was computed. [2022-07-19 17:23:20,158 INFO L895 garLoopResultBuilder]: At program point L811(line 811) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-07-19 17:23:20,158 INFO L899 garLoopResultBuilder]: For program point L811-1(lines 792 816) no Hoare annotation was computed. [2022-07-19 17:23:20,159 INFO L902 garLoopResultBuilder]: At program point L881(line 881) the Hoare annotation is: true [2022-07-19 17:23:20,159 INFO L899 garLoopResultBuilder]: For program point L881-1(line 881) no Hoare annotation was computed. [2022-07-19 17:23:20,159 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 876 886) the Hoare annotation is: true [2022-07-19 17:23:20,159 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 876 886) no Hoare annotation was computed. [2022-07-19 17:23:20,159 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 876 886) no Hoare annotation was computed. [2022-07-19 17:23:20,162 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:20,163 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-19 17:23:20,187 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.07 05:23:20 BoogieIcfgContainer [2022-07-19 17:23:20,195 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-19 17:23:20,196 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-19 17:23:20,196 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-19 17:23:20,197 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-19 17:23:20,197 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:23:12" (3/4) ... [2022-07-19 17:23:20,199 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-19 17:23:20,204 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-19 17:23:20,204 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-19 17:23:20,205 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-19 17:23:20,205 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-19 17:23:20,205 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-19 17:23:20,205 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-19 17:23:20,205 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-19 17:23:20,205 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-19 17:23:20,218 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-07-19 17:23:20,219 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-19 17:23:20,219 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-19 17:23:20,220 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-19 17:23:20,220 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-19 17:23:20,220 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:23:20,221 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:23:20,241 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || !(methaneLevelCritical == 0)) [2022-07-19 17:23:20,241 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (pumpRunning == 0 && 1 <= tmp)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) [2022-07-19 17:23:20,242 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp == 0 && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || (tmp == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0))) && (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-07-19 17:23:20,242 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-19 17:23:20,243 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && \result == 0) && 1 <= tmp) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2022-07-19 17:23:20,243 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((methaneLevelCritical <= tmp && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-07-19 17:23:20,243 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-07-19 17:23:20,243 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-07-19 17:23:20,243 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-07-19 17:23:20,264 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-19 17:23:20,266 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-19 17:23:20,266 INFO L158 Benchmark]: Toolchain (without parser) took 8496.93ms. Allocated memory was 94.4MB in the beginning and 146.8MB in the end (delta: 52.4MB). Free memory was 65.1MB in the beginning and 40.4MB in the end (delta: 24.7MB). Peak memory consumption was 77.1MB. Max. memory is 16.1GB. [2022-07-19 17:23:20,267 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 94.4MB. Free memory is still 49.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-19 17:23:20,267 INFO L158 Benchmark]: CACSL2BoogieTranslator took 412.59ms. Allocated memory was 94.4MB in the beginning and 119.5MB in the end (delta: 25.2MB). Free memory was 64.9MB in the beginning and 86.1MB in the end (delta: -21.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-19 17:23:20,267 INFO L158 Benchmark]: Boogie Procedure Inliner took 41.29ms. Allocated memory is still 119.5MB. Free memory was 86.1MB in the beginning and 84.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-19 17:23:20,268 INFO L158 Benchmark]: Boogie Preprocessor took 50.44ms. Allocated memory is still 119.5MB. Free memory was 84.0MB in the beginning and 82.3MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-19 17:23:20,268 INFO L158 Benchmark]: RCFGBuilder took 408.15ms. Allocated memory is still 119.5MB. Free memory was 82.3MB in the beginning and 66.3MB in the end (delta: 16.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-07-19 17:23:20,268 INFO L158 Benchmark]: TraceAbstraction took 7506.64ms. Allocated memory was 119.5MB in the beginning and 146.8MB in the end (delta: 27.3MB). Free memory was 65.6MB in the beginning and 45.6MB in the end (delta: 19.9MB). Peak memory consumption was 61.5MB. Max. memory is 16.1GB. [2022-07-19 17:23:20,269 INFO L158 Benchmark]: Witness Printer took 69.93ms. Allocated memory is still 146.8MB. Free memory was 45.6MB in the beginning and 40.4MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-19 17:23:20,270 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 94.4MB. Free memory is still 49.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 412.59ms. Allocated memory was 94.4MB in the beginning and 119.5MB in the end (delta: 25.2MB). Free memory was 64.9MB in the beginning and 86.1MB in the end (delta: -21.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 41.29ms. Allocated memory is still 119.5MB. Free memory was 86.1MB in the beginning and 84.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 50.44ms. Allocated memory is still 119.5MB. Free memory was 84.0MB in the beginning and 82.3MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 408.15ms. Allocated memory is still 119.5MB. Free memory was 82.3MB in the beginning and 66.3MB in the end (delta: 16.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 7506.64ms. Allocated memory was 119.5MB in the beginning and 146.8MB in the end (delta: 27.3MB). Free memory was 65.6MB in the beginning and 45.6MB in the end (delta: 19.9MB). Peak memory consumption was 61.5MB. Max. memory is 16.1GB. * Witness Printer took 69.93ms. Allocated memory is still 146.8MB. Free memory was 45.6MB in the beginning and 40.4MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 155]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 93 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.4s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1342 SdHoareTripleChecker+Valid, 1.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1313 mSDsluCounter, 3569 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2314 mSDsCounter, 445 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1757 IncrementalHoareTripleChecker+Invalid, 2202 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 445 mSolverCounterUnsat, 1255 mSDtfsCounter, 1757 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 367 GetRequests, 262 SyntacticMatches, 1 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 143 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=505occurred in iteration=9, InterpolantAutomatonStates: 88, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 11 MinimizatonAttempts, 64 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 1194 PreInvPairs, 1373 NumberOfFragments, 1461 HoareAnnotationTreeSize, 1194 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 42 FomulaSimplificationsInter, 6540 FormulaSimplificationTreeSizeReductionInter, 2.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 715 NumberOfCodeBlocks, 715 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 702 ConstructedInterpolants, 0 QuantifiedInterpolants, 1381 SizeOfPredicates, 6 NumberOfNonLiveVariables, 863 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 89/103 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 252]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 699]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 851]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((methaneLevelCritical <= tmp && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 690]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 868]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 932]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 818]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (pumpRunning == 0 && 1 <= tmp)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (!(1 == systemActive) || !(1 <= methaneLevelCritical)) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 887]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && \result == 0) && 1 <= tmp) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 843]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 199]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 307]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (tmp == 0 && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || (tmp == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0))) && (((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((((!(\old(pumpRunning) == 0) && pumpRunning == 0) && 1 <= tmp) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 314]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-07-19 17:23:20,318 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE