./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product46.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version eb692b52 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product46.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 02fb1fa00f2030f7900be70496baf2f4c44344da378fa11ef09f1f26dc14ae9d --- Real Ultimate output --- This is Ultimate 0.2.2-?-eb692b5 [2022-07-19 17:23:54,425 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-19 17:23:54,428 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-19 17:23:54,468 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-19 17:23:54,469 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-19 17:23:54,470 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-19 17:23:54,471 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-19 17:23:54,474 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-19 17:23:54,476 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-19 17:23:54,480 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-19 17:23:54,480 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-19 17:23:54,482 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-19 17:23:54,483 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-19 17:23:54,484 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-19 17:23:54,485 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-19 17:23:54,488 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-19 17:23:54,488 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-19 17:23:54,490 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-19 17:23:54,491 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-19 17:23:54,496 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-19 17:23:54,498 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-19 17:23:54,499 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-19 17:23:54,499 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-19 17:23:54,500 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-19 17:23:54,501 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-19 17:23:54,507 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-19 17:23:54,508 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-19 17:23:54,508 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-19 17:23:54,509 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-19 17:23:54,509 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-19 17:23:54,510 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-19 17:23:54,510 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-19 17:23:54,512 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-19 17:23:54,513 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-19 17:23:54,513 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-19 17:23:54,514 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-19 17:23:54,514 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-19 17:23:54,515 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-19 17:23:54,515 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-19 17:23:54,515 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-19 17:23:54,516 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-19 17:23:54,517 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-19 17:23:54,519 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-19 17:23:54,546 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-19 17:23:54,546 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-19 17:23:54,547 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-19 17:23:54,547 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-19 17:23:54,548 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-19 17:23:54,548 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-19 17:23:54,548 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-19 17:23:54,548 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-19 17:23:54,549 INFO L138 SettingsManager]: * Use SBE=true [2022-07-19 17:23:54,549 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-19 17:23:54,550 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-19 17:23:54,550 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-19 17:23:54,550 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-19 17:23:54,550 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-19 17:23:54,550 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-19 17:23:54,551 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-19 17:23:54,551 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-19 17:23:54,551 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-19 17:23:54,551 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-19 17:23:54,552 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-19 17:23:54,552 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-19 17:23:54,553 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-19 17:23:54,553 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-19 17:23:54,553 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-19 17:23:54,553 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:23:54,553 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-19 17:23:54,554 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-19 17:23:54,554 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-19 17:23:54,554 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-19 17:23:54,554 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-19 17:23:54,554 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-19 17:23:54,555 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-19 17:23:54,555 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-19 17:23:54,555 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 02fb1fa00f2030f7900be70496baf2f4c44344da378fa11ef09f1f26dc14ae9d [2022-07-19 17:23:54,794 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-19 17:23:54,813 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-19 17:23:54,815 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-19 17:23:54,816 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-19 17:23:54,819 INFO L275 PluginConnector]: CDTParser initialized [2022-07-19 17:23:54,820 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product46.cil.c [2022-07-19 17:23:54,887 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4a585a152/5003bfc3a5a849d4abd7736056eb0cbe/FLAG2793d6488 [2022-07-19 17:23:55,309 INFO L306 CDTParser]: Found 1 translation units. [2022-07-19 17:23:55,310 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product46.cil.c [2022-07-19 17:23:55,324 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4a585a152/5003bfc3a5a849d4abd7736056eb0cbe/FLAG2793d6488 [2022-07-19 17:23:55,336 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4a585a152/5003bfc3a5a849d4abd7736056eb0cbe [2022-07-19 17:23:55,338 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-19 17:23:55,340 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-19 17:23:55,341 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-19 17:23:55,341 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-19 17:23:55,348 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-19 17:23:55,349 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:23:55" (1/1) ... [2022-07-19 17:23:55,350 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@37fc822b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:55, skipping insertion in model container [2022-07-19 17:23:55,350 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:23:55" (1/1) ... [2022-07-19 17:23:55,357 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-19 17:23:55,408 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-19 17:23:55,632 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product46.cil.c[17174,17187] [2022-07-19 17:23:55,637 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:23:55,644 INFO L203 MainTranslator]: Completed pre-run [2022-07-19 17:23:55,707 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product46.cil.c[17174,17187] [2022-07-19 17:23:55,710 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:23:55,732 INFO L208 MainTranslator]: Completed translation [2022-07-19 17:23:55,734 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:55 WrapperNode [2022-07-19 17:23:55,735 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-19 17:23:55,737 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-19 17:23:55,737 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-19 17:23:55,737 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-19 17:23:55,745 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:55" (1/1) ... [2022-07-19 17:23:55,760 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:55" (1/1) ... [2022-07-19 17:23:55,790 INFO L137 Inliner]: procedures = 56, calls = 157, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 249 [2022-07-19 17:23:55,791 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-19 17:23:55,792 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-19 17:23:55,792 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-19 17:23:55,792 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-19 17:23:55,799 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:55" (1/1) ... [2022-07-19 17:23:55,799 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:55" (1/1) ... [2022-07-19 17:23:55,802 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:55" (1/1) ... [2022-07-19 17:23:55,802 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:55" (1/1) ... [2022-07-19 17:23:55,807 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:55" (1/1) ... [2022-07-19 17:23:55,811 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:55" (1/1) ... [2022-07-19 17:23:55,813 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:55" (1/1) ... [2022-07-19 17:23:55,815 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-19 17:23:55,816 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-19 17:23:55,816 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-19 17:23:55,816 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-19 17:23:55,817 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:55" (1/1) ... [2022-07-19 17:23:55,824 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:23:55,834 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:23:55,853 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-19 17:23:55,887 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-19 17:23:55,912 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-19 17:23:55,912 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-19 17:23:55,912 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-19 17:23:55,913 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-19 17:23:55,913 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-19 17:23:55,913 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-19 17:23:55,913 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-19 17:23:55,914 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-19 17:23:55,915 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-19 17:23:55,915 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-19 17:23:55,915 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-19 17:23:55,915 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-19 17:23:55,915 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-19 17:23:55,915 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-19 17:23:55,915 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-19 17:23:55,916 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-19 17:23:55,916 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-19 17:23:55,916 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-19 17:23:55,916 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-19 17:23:55,916 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-19 17:23:55,977 INFO L234 CfgBuilder]: Building ICFG [2022-07-19 17:23:55,979 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-19 17:23:56,302 INFO L275 CfgBuilder]: Performing block encoding [2022-07-19 17:23:56,321 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-19 17:23:56,321 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-19 17:23:56,326 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:23:56 BoogieIcfgContainer [2022-07-19 17:23:56,326 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-19 17:23:56,328 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-19 17:23:56,329 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-19 17:23:56,332 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-19 17:23:56,332 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.07 05:23:55" (1/3) ... [2022-07-19 17:23:56,333 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@721bd661 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:23:56, skipping insertion in model container [2022-07-19 17:23:56,333 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:23:55" (2/3) ... [2022-07-19 17:23:56,333 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@721bd661 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:23:56, skipping insertion in model container [2022-07-19 17:23:56,333 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:23:56" (3/3) ... [2022-07-19 17:23:56,335 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product46.cil.c [2022-07-19 17:23:56,353 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-19 17:23:56,353 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-19 17:23:56,409 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-19 17:23:56,419 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@6eff700e, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@e8f6be4 [2022-07-19 17:23:56,420 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-19 17:23:56,429 INFO L276 IsEmpty]: Start isEmpty. Operand has 96 states, 72 states have (on average 1.375) internal successors, (99), 80 states have internal predecessors, (99), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-19 17:23:56,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-19 17:23:56,450 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:56,451 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:56,452 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:56,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:56,460 INFO L85 PathProgramCache]: Analyzing trace with hash 92222794, now seen corresponding path program 1 times [2022-07-19 17:23:56,468 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:56,469 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [432950040] [2022-07-19 17:23:56,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:56,470 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:56,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:56,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:23:56,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:56,748 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:23:56,749 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:56,750 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [432950040] [2022-07-19 17:23:56,750 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [432950040] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:56,750 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:56,751 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-19 17:23:56,753 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1545983322] [2022-07-19 17:23:56,754 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:56,758 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-19 17:23:56,758 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:56,787 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-19 17:23:56,788 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:23:56,791 INFO L87 Difference]: Start difference. First operand has 96 states, 72 states have (on average 1.375) internal successors, (99), 80 states have internal predecessors, (99), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:23:56,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:56,845 INFO L93 Difference]: Finished difference Result 183 states and 248 transitions. [2022-07-19 17:23:56,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-19 17:23:56,848 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-19 17:23:56,849 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:56,860 INFO L225 Difference]: With dead ends: 183 [2022-07-19 17:23:56,860 INFO L226 Difference]: Without dead ends: 87 [2022-07-19 17:23:56,865 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:23:56,868 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:56,869 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:23:56,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2022-07-19 17:23:56,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 87. [2022-07-19 17:23:56,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 72 states have internal predecessors, (85), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-19 17:23:56,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 112 transitions. [2022-07-19 17:23:56,916 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 112 transitions. Word has length 25 [2022-07-19 17:23:56,917 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:56,917 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 112 transitions. [2022-07-19 17:23:56,917 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:23:56,917 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2022-07-19 17:23:56,919 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-19 17:23:56,919 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:56,920 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:56,920 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-19 17:23:56,920 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:56,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:56,921 INFO L85 PathProgramCache]: Analyzing trace with hash -1552792509, now seen corresponding path program 1 times [2022-07-19 17:23:56,921 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:56,921 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1856773978] [2022-07-19 17:23:56,921 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:56,922 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:56,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:56,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-19 17:23:56,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:56,980 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:23:56,980 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:56,981 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1856773978] [2022-07-19 17:23:56,981 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1856773978] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:56,981 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:56,981 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-19 17:23:56,982 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [37843324] [2022-07-19 17:23:56,982 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:56,983 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:23:56,983 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:56,984 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:23:56,984 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:23:56,984 INFO L87 Difference]: Start difference. First operand 87 states and 112 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:23:56,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:56,998 INFO L93 Difference]: Finished difference Result 138 states and 178 transitions. [2022-07-19 17:23:56,999 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:23:56,999 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-19 17:23:56,999 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:57,000 INFO L225 Difference]: With dead ends: 138 [2022-07-19 17:23:57,000 INFO L226 Difference]: Without dead ends: 78 [2022-07-19 17:23:57,001 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:23:57,002 INFO L413 NwaCegarLoop]: 99 mSDtfsCounter, 13 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 181 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:57,003 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 181 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:23:57,004 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-07-19 17:23:57,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-07-19 17:23:57,011 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-19 17:23:57,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 100 transitions. [2022-07-19 17:23:57,012 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 100 transitions. Word has length 26 [2022-07-19 17:23:57,012 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:57,012 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 100 transitions. [2022-07-19 17:23:57,013 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:23:57,013 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2022-07-19 17:23:57,014 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-07-19 17:23:57,014 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:57,014 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:57,015 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-19 17:23:57,015 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:57,015 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:57,016 INFO L85 PathProgramCache]: Analyzing trace with hash 877193570, now seen corresponding path program 1 times [2022-07-19 17:23:57,016 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:57,016 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1791726501] [2022-07-19 17:23:57,016 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:57,017 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:57,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:57,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:23:57,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:57,116 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:23:57,116 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:57,116 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1791726501] [2022-07-19 17:23:57,117 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1791726501] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:57,117 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:57,117 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-19 17:23:57,117 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [994401374] [2022-07-19 17:23:57,117 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:57,118 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:23:57,118 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:57,118 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:23:57,118 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:23:57,119 INFO L87 Difference]: Start difference. First operand 78 states and 100 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:23:57,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:57,133 INFO L93 Difference]: Finished difference Result 148 states and 193 transitions. [2022-07-19 17:23:57,133 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:23:57,133 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-07-19 17:23:57,134 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:57,135 INFO L225 Difference]: With dead ends: 148 [2022-07-19 17:23:57,135 INFO L226 Difference]: Without dead ends: 78 [2022-07-19 17:23:57,136 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:23:57,137 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 79 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 98 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:57,137 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 98 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:23:57,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-07-19 17:23:57,145 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-07-19 17:23:57,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.305084745762712) internal successors, (77), 66 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-19 17:23:57,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 99 transitions. [2022-07-19 17:23:57,146 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 99 transitions. Word has length 31 [2022-07-19 17:23:57,146 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:57,146 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 99 transitions. [2022-07-19 17:23:57,147 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:23:57,147 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2022-07-19 17:23:57,148 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-07-19 17:23:57,148 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:57,148 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:57,148 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-19 17:23:57,148 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:57,149 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:57,149 INFO L85 PathProgramCache]: Analyzing trace with hash -100681773, now seen corresponding path program 1 times [2022-07-19 17:23:57,149 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:57,149 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [534187057] [2022-07-19 17:23:57,149 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:57,150 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:57,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:57,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:23:57,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:57,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:23:57,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:57,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-07-19 17:23:57,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:57,224 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:23:57,224 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:57,224 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [534187057] [2022-07-19 17:23:57,225 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [534187057] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:57,225 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:57,225 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-19 17:23:57,225 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1871478598] [2022-07-19 17:23:57,226 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:57,227 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-19 17:23:57,227 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:57,228 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-19 17:23:57,228 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-19 17:23:57,228 INFO L87 Difference]: Start difference. First operand 78 states and 99 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-19 17:23:57,447 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:57,448 INFO L93 Difference]: Finished difference Result 229 states and 291 transitions. [2022-07-19 17:23:57,448 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-19 17:23:57,448 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2022-07-19 17:23:57,449 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:57,451 INFO L225 Difference]: With dead ends: 229 [2022-07-19 17:23:57,451 INFO L226 Difference]: Without dead ends: 159 [2022-07-19 17:23:57,454 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-07-19 17:23:57,458 INFO L413 NwaCegarLoop]: 135 mSDtfsCounter, 181 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:57,460 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [183 Valid, 306 Invalid, 167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:23:57,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159 states. [2022-07-19 17:23:57,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159 to 153. [2022-07-19 17:23:57,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153 states, 116 states have (on average 1.2672413793103448) internal successors, (147), 124 states have internal predecessors, (147), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-07-19 17:23:57,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153 states to 153 states and 188 transitions. [2022-07-19 17:23:57,497 INFO L78 Accepts]: Start accepts. Automaton has 153 states and 188 transitions. Word has length 41 [2022-07-19 17:23:57,497 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:57,497 INFO L495 AbstractCegarLoop]: Abstraction has 153 states and 188 transitions. [2022-07-19 17:23:57,497 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-19 17:23:57,497 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 188 transitions. [2022-07-19 17:23:57,498 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-07-19 17:23:57,498 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:57,498 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:57,499 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-19 17:23:57,499 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:57,499 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:57,499 INFO L85 PathProgramCache]: Analyzing trace with hash -1653796005, now seen corresponding path program 1 times [2022-07-19 17:23:57,500 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:57,500 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1173166649] [2022-07-19 17:23:57,500 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:57,500 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:57,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:57,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:23:57,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:57,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:23:57,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:57,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-07-19 17:23:57,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:57,606 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:23:57,607 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:57,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1173166649] [2022-07-19 17:23:57,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1173166649] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:57,607 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:57,607 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:23:57,608 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1440382569] [2022-07-19 17:23:57,608 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:57,608 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:23:57,608 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:57,609 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:23:57,609 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:23:57,609 INFO L87 Difference]: Start difference. First operand 153 states and 188 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-19 17:23:57,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:57,880 INFO L93 Difference]: Finished difference Result 443 states and 552 transitions. [2022-07-19 17:23:57,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-19 17:23:57,884 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-07-19 17:23:57,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:57,891 INFO L225 Difference]: With dead ends: 443 [2022-07-19 17:23:57,891 INFO L226 Difference]: Without dead ends: 298 [2022-07-19 17:23:57,893 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-07-19 17:23:57,900 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 148 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 227 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 428 SdHoareTripleChecker+Invalid, 282 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 227 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:57,900 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [157 Valid, 428 Invalid, 282 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 227 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:23:57,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 298 states. [2022-07-19 17:23:57,938 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 298 to 284. [2022-07-19 17:23:57,939 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 284 states, 211 states have (on average 1.2274881516587677) internal successors, (259), 226 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-07-19 17:23:57,940 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 284 states to 284 states and 343 transitions. [2022-07-19 17:23:57,941 INFO L78 Accepts]: Start accepts. Automaton has 284 states and 343 transitions. Word has length 47 [2022-07-19 17:23:57,941 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:57,941 INFO L495 AbstractCegarLoop]: Abstraction has 284 states and 343 transitions. [2022-07-19 17:23:57,941 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-19 17:23:57,941 INFO L276 IsEmpty]: Start isEmpty. Operand 284 states and 343 transitions. [2022-07-19 17:23:57,943 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-07-19 17:23:57,943 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:57,943 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:57,943 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-19 17:23:57,943 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:57,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:57,944 INFO L85 PathProgramCache]: Analyzing trace with hash 858621823, now seen corresponding path program 1 times [2022-07-19 17:23:57,944 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:57,944 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1037247037] [2022-07-19 17:23:57,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:57,944 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:57,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:57,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-19 17:23:57,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-19 17:23:58,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:23:58,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-07-19 17:23:58,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,019 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:23:58,019 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:58,019 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1037247037] [2022-07-19 17:23:58,019 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1037247037] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:58,019 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:58,020 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:23:58,020 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1044785918] [2022-07-19 17:23:58,020 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:58,020 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:23:58,021 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:58,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:23:58,021 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:23:58,021 INFO L87 Difference]: Start difference. First operand 284 states and 343 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-19 17:23:58,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:58,406 INFO L93 Difference]: Finished difference Result 572 states and 692 transitions. [2022-07-19 17:23:58,406 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-07-19 17:23:58,406 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 51 [2022-07-19 17:23:58,407 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:58,408 INFO L225 Difference]: With dead ends: 572 [2022-07-19 17:23:58,409 INFO L226 Difference]: Without dead ends: 296 [2022-07-19 17:23:58,409 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2022-07-19 17:23:58,410 INFO L413 NwaCegarLoop]: 101 mSDtfsCounter, 187 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 378 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 189 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 448 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 378 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:58,411 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [189 Valid, 210 Invalid, 448 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 378 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-19 17:23:58,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2022-07-19 17:23:58,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 282. [2022-07-19 17:23:58,431 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 282 states, 209 states have (on average 1.2105263157894737) internal successors, (253), 224 states have internal predecessors, (253), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-07-19 17:23:58,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 282 states to 282 states and 337 transitions. [2022-07-19 17:23:58,432 INFO L78 Accepts]: Start accepts. Automaton has 282 states and 337 transitions. Word has length 51 [2022-07-19 17:23:58,433 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:58,433 INFO L495 AbstractCegarLoop]: Abstraction has 282 states and 337 transitions. [2022-07-19 17:23:58,434 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-19 17:23:58,434 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 337 transitions. [2022-07-19 17:23:58,435 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-07-19 17:23:58,436 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:58,436 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:58,436 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-19 17:23:58,436 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:58,437 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:58,437 INFO L85 PathProgramCache]: Analyzing trace with hash 1850253156, now seen corresponding path program 1 times [2022-07-19 17:23:58,437 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:58,437 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [437448511] [2022-07-19 17:23:58,438 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:58,438 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:58,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-19 17:23:58,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-19 17:23:58,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:23:58,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:23:58,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-19 17:23:58,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,503 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:23:58,504 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:58,504 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [437448511] [2022-07-19 17:23:58,504 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [437448511] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:58,504 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:58,504 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:23:58,505 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [258478146] [2022-07-19 17:23:58,505 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:58,505 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:23:58,505 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:58,506 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:23:58,506 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:23:58,506 INFO L87 Difference]: Start difference. First operand 282 states and 337 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-19 17:23:58,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:58,783 INFO L93 Difference]: Finished difference Result 574 states and 699 transitions. [2022-07-19 17:23:58,783 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-19 17:23:58,784 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2022-07-19 17:23:58,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:58,788 INFO L225 Difference]: With dead ends: 574 [2022-07-19 17:23:58,789 INFO L226 Difference]: Without dead ends: 300 [2022-07-19 17:23:58,791 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-19 17:23:58,792 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 125 mSDsluCounter, 117 mSDsCounter, 0 mSdLazyCounter, 315 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 369 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 315 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:58,793 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 207 Invalid, 369 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 315 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:23:58,794 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 300 states. [2022-07-19 17:23:58,818 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 300 to 288. [2022-07-19 17:23:58,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 288 states, 215 states have (on average 1.2046511627906977) internal successors, (259), 230 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-07-19 17:23:58,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 288 states to 288 states and 343 transitions. [2022-07-19 17:23:58,822 INFO L78 Accepts]: Start accepts. Automaton has 288 states and 343 transitions. Word has length 61 [2022-07-19 17:23:58,824 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:58,824 INFO L495 AbstractCegarLoop]: Abstraction has 288 states and 343 transitions. [2022-07-19 17:23:58,825 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-19 17:23:58,825 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 343 transitions. [2022-07-19 17:23:58,832 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-07-19 17:23:58,832 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:58,832 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:58,833 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-19 17:23:58,833 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:58,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:58,833 INFO L85 PathProgramCache]: Analyzing trace with hash -1743114266, now seen corresponding path program 1 times [2022-07-19 17:23:58,834 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:58,834 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2100368888] [2022-07-19 17:23:58,834 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:58,834 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:58,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-19 17:23:58,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-19 17:23:58,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:23:58,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:23:58,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-19 17:23:58,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:58,925 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:23:58,925 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:58,925 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2100368888] [2022-07-19 17:23:58,926 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2100368888] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:58,926 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:58,926 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:23:58,926 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [519924794] [2022-07-19 17:23:58,926 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:58,927 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:23:58,927 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:58,927 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:23:58,927 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:23:58,928 INFO L87 Difference]: Start difference. First operand 288 states and 343 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-19 17:23:59,147 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:59,148 INFO L93 Difference]: Finished difference Result 586 states and 711 transitions. [2022-07-19 17:23:59,148 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-19 17:23:59,148 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 61 [2022-07-19 17:23:59,148 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:59,151 INFO L225 Difference]: With dead ends: 586 [2022-07-19 17:23:59,151 INFO L226 Difference]: Without dead ends: 306 [2022-07-19 17:23:59,152 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-19 17:23:59,152 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 196 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 230 mSolverCounterSat, 75 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 198 SdHoareTripleChecker+Valid, 182 SdHoareTripleChecker+Invalid, 305 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 75 IncrementalHoareTripleChecker+Valid, 230 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:59,155 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [198 Valid, 182 Invalid, 305 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [75 Valid, 230 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:23:59,157 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 306 states. [2022-07-19 17:23:59,178 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 306 to 292. [2022-07-19 17:23:59,178 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 219 states have (on average 1.2009132420091324) internal successors, (263), 234 states have internal predecessors, (263), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-07-19 17:23:59,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 347 transitions. [2022-07-19 17:23:59,183 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 347 transitions. Word has length 61 [2022-07-19 17:23:59,184 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:59,184 INFO L495 AbstractCegarLoop]: Abstraction has 292 states and 347 transitions. [2022-07-19 17:23:59,184 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-19 17:23:59,184 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 347 transitions. [2022-07-19 17:23:59,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-07-19 17:23:59,186 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:59,186 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:59,186 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-19 17:23:59,186 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:59,187 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:59,187 INFO L85 PathProgramCache]: Analyzing trace with hash -1815500824, now seen corresponding path program 1 times [2022-07-19 17:23:59,187 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:59,187 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1242141103] [2022-07-19 17:23:59,187 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:59,187 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:59,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-19 17:23:59,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-19 17:23:59,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:23:59,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:23:59,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-19 17:23:59,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,292 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:23:59,292 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:59,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1242141103] [2022-07-19 17:23:59,292 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1242141103] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:23:59,292 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:23:59,293 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:23:59,293 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [242292212] [2022-07-19 17:23:59,293 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:23:59,294 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:23:59,294 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:23:59,295 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:23:59,295 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:23:59,295 INFO L87 Difference]: Start difference. First operand 292 states and 347 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-19 17:23:59,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:23:59,634 INFO L93 Difference]: Finished difference Result 804 states and 1007 transitions. [2022-07-19 17:23:59,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-19 17:23:59,635 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2022-07-19 17:23:59,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:23:59,638 INFO L225 Difference]: With dead ends: 804 [2022-07-19 17:23:59,638 INFO L226 Difference]: Without dead ends: 520 [2022-07-19 17:23:59,639 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-19 17:23:59,640 INFO L413 NwaCegarLoop]: 135 mSDtfsCounter, 298 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 272 mSolverCounterSat, 129 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 300 SdHoareTripleChecker+Valid, 240 SdHoareTripleChecker+Invalid, 401 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 129 IncrementalHoareTripleChecker+Valid, 272 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-19 17:23:59,640 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [300 Valid, 240 Invalid, 401 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [129 Valid, 272 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-19 17:23:59,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 520 states. [2022-07-19 17:23:59,662 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 520 to 518. [2022-07-19 17:23:59,664 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 518 states, 389 states have (on average 1.19280205655527) internal successors, (464), 412 states have internal predecessors, (464), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) [2022-07-19 17:23:59,666 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 518 states to 518 states and 631 transitions. [2022-07-19 17:23:59,667 INFO L78 Accepts]: Start accepts. Automaton has 518 states and 631 transitions. Word has length 61 [2022-07-19 17:23:59,667 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:23:59,667 INFO L495 AbstractCegarLoop]: Abstraction has 518 states and 631 transitions. [2022-07-19 17:23:59,667 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-19 17:23:59,668 INFO L276 IsEmpty]: Start isEmpty. Operand 518 states and 631 transitions. [2022-07-19 17:23:59,669 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-07-19 17:23:59,669 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:23:59,669 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:23:59,669 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-19 17:23:59,669 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:23:59,670 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:23:59,670 INFO L85 PathProgramCache]: Analyzing trace with hash -1657207794, now seen corresponding path program 1 times [2022-07-19 17:23:59,670 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:23:59,670 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [995526163] [2022-07-19 17:23:59,670 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:59,671 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:23:59,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:23:59,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:23:59,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-19 17:23:59,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:23:59,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:23:59,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-19 17:23:59,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,802 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-19 17:23:59,802 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:23:59,802 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [995526163] [2022-07-19 17:23:59,802 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [995526163] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:23:59,803 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1959440289] [2022-07-19 17:23:59,803 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:23:59,803 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:23:59,803 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:23:59,805 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:23:59,817 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-19 17:23:59,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:23:59,904 INFO L263 TraceCheckSpWp]: Trace formula consists of 397 conjuncts, 9 conjunts are in the unsatisfiable core [2022-07-19 17:23:59,910 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:24:00,157 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:24:00,157 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-19 17:24:00,157 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1959440289] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:00,157 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-19 17:24:00,157 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2022-07-19 17:24:00,157 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [347335227] [2022-07-19 17:24:00,158 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:00,158 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-19 17:24:00,158 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:00,158 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-19 17:24:00,159 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2022-07-19 17:24:00,159 INFO L87 Difference]: Start difference. First operand 518 states and 631 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-07-19 17:24:00,296 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:00,297 INFO L93 Difference]: Finished difference Result 1006 states and 1230 transitions. [2022-07-19 17:24:00,297 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-19 17:24:00,297 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 65 [2022-07-19 17:24:00,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:00,300 INFO L225 Difference]: With dead ends: 1006 [2022-07-19 17:24:00,300 INFO L226 Difference]: Without dead ends: 496 [2022-07-19 17:24:00,302 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 85 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2022-07-19 17:24:00,303 INFO L413 NwaCegarLoop]: 175 mSDtfsCounter, 63 mSDsluCounter, 478 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 653 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:00,303 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 653 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:24:00,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 496 states. [2022-07-19 17:24:00,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 496 to 494. [2022-07-19 17:24:00,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 494 states, 370 states have (on average 1.1756756756756757) internal successors, (435), 392 states have internal predecessors, (435), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) [2022-07-19 17:24:00,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 494 states to 494 states and 587 transitions. [2022-07-19 17:24:00,330 INFO L78 Accepts]: Start accepts. Automaton has 494 states and 587 transitions. Word has length 65 [2022-07-19 17:24:00,331 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:00,331 INFO L495 AbstractCegarLoop]: Abstraction has 494 states and 587 transitions. [2022-07-19 17:24:00,331 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-07-19 17:24:00,331 INFO L276 IsEmpty]: Start isEmpty. Operand 494 states and 587 transitions. [2022-07-19 17:24:00,333 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-07-19 17:24:00,333 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:00,333 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:00,357 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-19 17:24:00,555 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-19 17:24:00,556 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:00,556 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:00,556 INFO L85 PathProgramCache]: Analyzing trace with hash 1520356328, now seen corresponding path program 1 times [2022-07-19 17:24:00,556 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:00,556 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1431877609] [2022-07-19 17:24:00,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:00,557 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:00,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:24:00,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-19 17:24:00,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:24:00,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:24:00,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:24:00,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-19 17:24:00,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-07-19 17:24:00,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-07-19 17:24:00,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-19 17:24:00,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-07-19 17:24:00,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:24:00,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-07-19 17:24:00,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,733 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 14 proven. 13 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-07-19 17:24:00,733 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:00,733 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1431877609] [2022-07-19 17:24:00,733 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1431877609] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:24:00,733 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [190797864] [2022-07-19 17:24:00,733 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:00,734 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:24:00,734 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:24:00,735 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:24:00,761 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-19 17:24:00,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:00,842 INFO L263 TraceCheckSpWp]: Trace formula consists of 508 conjuncts, 9 conjunts are in the unsatisfiable core [2022-07-19 17:24:00,850 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:24:00,976 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-19 17:24:00,976 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-19 17:24:00,976 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [190797864] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:00,977 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-19 17:24:00,977 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2022-07-19 17:24:00,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2015273704] [2022-07-19 17:24:00,977 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:00,978 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-19 17:24:00,978 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:00,979 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-19 17:24:00,979 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=293, Unknown=0, NotChecked=0, Total=342 [2022-07-19 17:24:00,979 INFO L87 Difference]: Start difference. First operand 494 states and 587 transitions. Second operand has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-07-19 17:24:01,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:01,081 INFO L93 Difference]: Finished difference Result 845 states and 1014 transitions. [2022-07-19 17:24:01,082 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-19 17:24:01,082 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 110 [2022-07-19 17:24:01,083 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:01,084 INFO L225 Difference]: With dead ends: 845 [2022-07-19 17:24:01,084 INFO L226 Difference]: Without dead ends: 0 [2022-07-19 17:24:01,086 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=359, Unknown=0, NotChecked=0, Total=420 [2022-07-19 17:24:01,087 INFO L413 NwaCegarLoop]: 174 mSDtfsCounter, 68 mSDsluCounter, 780 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 954 SdHoareTripleChecker+Invalid, 112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:01,087 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 954 Invalid, 112 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:24:01,088 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-19 17:24:01,088 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-19 17:24:01,088 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:24:01,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-19 17:24:01,089 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2022-07-19 17:24:01,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:01,089 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-19 17:24:01,090 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-07-19 17:24:01,090 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-19 17:24:01,090 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-19 17:24:01,092 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-19 17:24:01,122 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-19 17:24:01,307 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-19 17:24:01,309 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-19 17:24:03,918 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 688 694) no Hoare annotation was computed. [2022-07-19 17:24:03,918 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 688 694) the Hoare annotation is: true [2022-07-19 17:24:03,919 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 487 498) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (not (<= 1 |old(~methaneLevelCritical~0)|))))) [2022-07-19 17:24:03,919 INFO L899 garLoopResultBuilder]: For program point L491-1(lines 487 498) no Hoare annotation was computed. [2022-07-19 17:24:03,919 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 487 498) no Hoare annotation was computed. [2022-07-19 17:24:03,919 INFO L899 garLoopResultBuilder]: For program point L894(lines 894 904) no Hoare annotation was computed. [2022-07-19 17:24:03,919 INFO L899 garLoopResultBuilder]: For program point L890(lines 890 907) no Hoare annotation was computed. [2022-07-19 17:24:03,919 INFO L895 garLoopResultBuilder]: At program point L890-1(lines 882 910) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse7 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~8#1| 0)) (.cse13 (= 1 ~systemActive~0)) (.cse14 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not .cse14)) (.cse9 (and .cse14 .cse12 .cse7 .cse13)) (.cse2 (not .cse13)) (.cse10 (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse0 .cse8 .cse13)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or (and .cse6 .cse7) .cse2 .cse5 (and .cse8 .cse7) .cse9) (or .cse2 .cse10 .cse3 (and .cse6 .cse8)) (or .cse0 .cse2 .cse5 .cse9 .cse11) (or .cse2 .cse12 .cse10 .cse3 .cse11)))) [2022-07-19 17:24:03,919 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 664 687) no Hoare annotation was computed. [2022-07-19 17:24:03,919 INFO L899 garLoopResultBuilder]: For program point L895(lines 895 901) no Hoare annotation was computed. [2022-07-19 17:24:03,920 INFO L895 garLoopResultBuilder]: At program point L796(lines 791 799) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= ~waterLevel~0 1)) (or .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_isPumpRunning_#res#1| 0))) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse3 .cse4) .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse4) .cse2)) (or .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-07-19 17:24:03,920 INFO L899 garLoopResultBuilder]: For program point L668-1(lines 667 686) no Hoare annotation was computed. [2022-07-19 17:24:03,921 INFO L899 garLoopResultBuilder]: For program point L730(lines 730 738) no Hoare annotation was computed. [2022-07-19 17:24:03,921 INFO L899 garLoopResultBuilder]: For program point L726(lines 726 743) no Hoare annotation was computed. [2022-07-19 17:24:03,921 INFO L895 garLoopResultBuilder]: At program point L888(line 888) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse8 .cse9 .cse2 .cse6 .cse5) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse9) .cse2 .cse3 (and .cse8 .cse9)) (or .cse0 .cse2 .cse6 .cse5 .cse7))) [2022-07-19 17:24:03,921 INFO L899 garLoopResultBuilder]: For program point L888-1(line 888) no Hoare annotation was computed. [2022-07-19 17:24:03,921 INFO L899 garLoopResultBuilder]: For program point L467(lines 467 471) no Hoare annotation was computed. [2022-07-19 17:24:03,921 INFO L895 garLoopResultBuilder]: At program point L467-2(lines 463 474) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-07-19 17:24:03,921 INFO L895 garLoopResultBuilder]: At program point L777(lines 772 779) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse0) .cse1 .cse2) (or .cse3 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or .cse0 .cse1 .cse4))) [2022-07-19 17:24:03,923 INFO L899 garLoopResultBuilder]: For program point L868(line 868) no Hoare annotation was computed. [2022-07-19 17:24:03,923 INFO L895 garLoopResultBuilder]: At program point L736(line 736) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))) (not (= ~methaneLevelCritical~0 0))))) [2022-07-19 17:24:03,923 INFO L895 garLoopResultBuilder]: At program point L728(line 728) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-07-19 17:24:03,923 INFO L899 garLoopResultBuilder]: For program point L728-1(line 728) no Hoare annotation was computed. [2022-07-19 17:24:03,923 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 664 687) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse6 .cse2 .cse5) (or .cse6 .cse2 .cse3) (or .cse2 .cse7 .cse3 .cse8) (or .cse2 .cse7 .cse5 .cse8))) [2022-07-19 17:24:03,923 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 664 687) no Hoare annotation was computed. [2022-07-19 17:24:03,923 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 868) no Hoare annotation was computed. [2022-07-19 17:24:03,923 INFO L895 garLoopResultBuilder]: At program point L741(line 741) the Hoare annotation is: (let ((.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse5 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or .cse4 .cse0 .cse3 .cse5) (or .cse4 .cse0 .cse1 .cse5) (or .cse0 .cse6 .cse3 .cse7) (or .cse0 .cse6 .cse1 .cse7))) [2022-07-19 17:24:03,923 INFO L895 garLoopResultBuilder]: At program point L869(lines 864 871) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-07-19 17:24:03,928 INFO L895 garLoopResultBuilder]: At program point L741-1(lines 722 746) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse8 .cse9 .cse2 .cse6 .cse5) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse9) .cse2 .cse3 (and .cse8 .cse9)) (or .cse0 .cse2 .cse6 .cse5 .cse7))) [2022-07-19 17:24:03,928 INFO L899 garLoopResultBuilder]: For program point L675-1(lines 675 681) no Hoare annotation was computed. [2022-07-19 17:24:03,928 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 557 586) no Hoare annotation was computed. [2022-07-19 17:24:03,929 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 557 586) the Hoare annotation is: true [2022-07-19 17:24:03,929 INFO L899 garLoopResultBuilder]: For program point L571(lines 571 575) no Hoare annotation was computed. [2022-07-19 17:24:03,929 INFO L902 garLoopResultBuilder]: At program point L571-1(lines 571 575) the Hoare annotation is: true [2022-07-19 17:24:03,929 INFO L899 garLoopResultBuilder]: For program point L568(line 568) no Hoare annotation was computed. [2022-07-19 17:24:03,929 INFO L902 garLoopResultBuilder]: At program point L567-2(lines 567 581) the Hoare annotation is: true [2022-07-19 17:24:03,929 INFO L902 garLoopResultBuilder]: At program point L563(line 563) the Hoare annotation is: true [2022-07-19 17:24:03,929 INFO L899 garLoopResultBuilder]: For program point L563-1(line 563) no Hoare annotation was computed. [2022-07-19 17:24:03,929 INFO L902 garLoopResultBuilder]: At program point L582(lines 557 586) the Hoare annotation is: true [2022-07-19 17:24:03,929 INFO L899 garLoopResultBuilder]: For program point L578(line 578) no Hoare annotation was computed. [2022-07-19 17:24:03,929 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 499 507) the Hoare annotation is: true [2022-07-19 17:24:03,929 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 499 507) no Hoare annotation was computed. [2022-07-19 17:24:03,929 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 499 507) no Hoare annotation was computed. [2022-07-19 17:24:03,929 INFO L899 garLoopResultBuilder]: For program point L960(lines 960 964) no Hoare annotation was computed. [2022-07-19 17:24:03,930 INFO L899 garLoopResultBuilder]: For program point L642-2(lines 642 649) no Hoare annotation was computed. [2022-07-19 17:24:03,930 INFO L895 garLoopResultBuilder]: At program point L960-2(lines 952 965) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-07-19 17:24:03,930 INFO L899 garLoopResultBuilder]: For program point L923(lines 922 969) no Hoare annotation was computed. [2022-07-19 17:24:03,930 INFO L899 garLoopResultBuilder]: For program point L952(lines 952 965) no Hoare annotation was computed. [2022-07-19 17:24:03,930 INFO L895 garLoopResultBuilder]: At program point L944(line 944) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-07-19 17:24:03,930 INFO L902 garLoopResultBuilder]: At program point L973(lines 912 977) the Hoare annotation is: true [2022-07-19 17:24:03,930 INFO L902 garLoopResultBuilder]: At program point L651(lines 632 654) the Hoare annotation is: true [2022-07-19 17:24:03,930 INFO L899 garLoopResultBuilder]: For program point L932(lines 932 938) no Hoare annotation was computed. [2022-07-19 17:24:03,930 INFO L899 garLoopResultBuilder]: For program point L932-1(lines 932 938) no Hoare annotation was computed. [2022-07-19 17:24:03,930 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-19 17:24:03,930 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-19 17:24:03,930 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-19 17:24:03,930 INFO L899 garLoopResultBuilder]: For program point L924(lines 924 928) no Hoare annotation was computed. [2022-07-19 17:24:03,931 INFO L895 garLoopResultBuilder]: At program point L879(lines 874 881) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:24:03,931 INFO L895 garLoopResultBuilder]: At program point L970(lines 921 971) the Hoare annotation is: false [2022-07-19 17:24:03,931 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-19 17:24:03,931 INFO L895 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:24:03,931 INFO L899 garLoopResultBuilder]: For program point L942(lines 942 948) no Hoare annotation was computed. [2022-07-19 17:24:03,931 INFO L899 garLoopResultBuilder]: For program point L942-1(lines 942 948) no Hoare annotation was computed. [2022-07-19 17:24:03,931 INFO L895 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:24:03,931 INFO L895 garLoopResultBuilder]: At program point L616(lines 612 618) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:24:03,931 INFO L895 garLoopResultBuilder]: At program point L967(lines 922 969) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-07-19 17:24:03,931 INFO L895 garLoopResultBuilder]: At program point L934(line 934) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-07-19 17:24:03,931 INFO L895 garLoopResultBuilder]: At program point L860(lines 855 862) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-07-19 17:24:03,931 INFO L902 garLoopResultBuilder]: At program point L629(lines 621 631) the Hoare annotation is: true [2022-07-19 17:24:03,931 INFO L895 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:24:03,932 INFO L899 garLoopResultBuilder]: For program point L642(lines 642 649) no Hoare annotation was computed. [2022-07-19 17:24:03,932 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 475 486) no Hoare annotation was computed. [2022-07-19 17:24:03,932 INFO L899 garLoopResultBuilder]: For program point L479-1(lines 475 486) no Hoare annotation was computed. [2022-07-19 17:24:03,932 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 475 486) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse5 .cse7) (or .cse2 .cse6 .cse3 .cse7))) [2022-07-19 17:24:03,932 INFO L899 garLoopResultBuilder]: For program point L704(lines 704 712) no Hoare annotation was computed. [2022-07-19 17:24:03,932 INFO L899 garLoopResultBuilder]: For program point L700(lines 700 717) no Hoare annotation was computed. [2022-07-19 17:24:03,932 INFO L899 garLoopResultBuilder]: For program point L762(lines 762 768) no Hoare annotation was computed. [2022-07-19 17:24:03,932 INFO L895 garLoopResultBuilder]: At program point L760(line 760) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2)) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2022-07-19 17:24:03,932 INFO L895 garLoopResultBuilder]: At program point L762-2(lines 755 771) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (and (= ~pumpRunning~0 0) .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1|)) (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 .cse3 .cse2))) [2022-07-19 17:24:03,932 INFO L899 garLoopResultBuilder]: For program point L760-1(line 760) no Hoare annotation was computed. [2022-07-19 17:24:03,932 INFO L895 garLoopResultBuilder]: At program point L851(lines 836 854) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~0#1| 0)) (.cse5 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0))) (and (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or .cse0 (and .cse1 .cse2 .cse3) (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse2 .cse4 .cse5))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse2 .cse4 .cse5) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse3)))) [2022-07-19 17:24:03,932 INFO L895 garLoopResultBuilder]: At program point L752(lines 747 754) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (<= 2 ~waterLevel~0) .cse2))) [2022-07-19 17:24:03,933 INFO L899 garLoopResultBuilder]: For program point L845(lines 845 849) no Hoare annotation was computed. [2022-07-19 17:24:03,933 INFO L899 garLoopResultBuilder]: For program point L845-2(lines 845 849) no Hoare annotation was computed. [2022-07-19 17:24:03,933 INFO L895 garLoopResultBuilder]: At program point L715(line 715) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-07-19 17:24:03,933 INFO L899 garLoopResultBuilder]: For program point L715-1(lines 696 720) no Hoare annotation was computed. [2022-07-19 17:24:03,933 INFO L899 garLoopResultBuilder]: For program point L544(lines 544 550) no Hoare annotation was computed. [2022-07-19 17:24:03,933 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 696 720) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-07-19 17:24:03,933 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 696 720) no Hoare annotation was computed. [2022-07-19 17:24:03,933 INFO L895 garLoopResultBuilder]: At program point L710(line 710) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse2)) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse2 (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1)))) [2022-07-19 17:24:03,933 INFO L895 garLoopResultBuilder]: At program point L549(lines 540 553) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse5)) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or (not .cse1) .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4)))) [2022-07-19 17:24:03,933 INFO L902 garLoopResultBuilder]: At program point L785(line 785) the Hoare annotation is: true [2022-07-19 17:24:03,933 INFO L899 garLoopResultBuilder]: For program point L785-1(line 785) no Hoare annotation was computed. [2022-07-19 17:24:03,933 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 780 790) the Hoare annotation is: true [2022-07-19 17:24:03,934 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 780 790) no Hoare annotation was computed. [2022-07-19 17:24:03,934 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 780 790) no Hoare annotation was computed. [2022-07-19 17:24:03,937 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:03,939 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-19 17:24:03,968 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.07 05:24:03 BoogieIcfgContainer [2022-07-19 17:24:03,968 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-19 17:24:03,969 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-19 17:24:03,969 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-19 17:24:03,969 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-19 17:24:03,970 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:23:56" (3/4) ... [2022-07-19 17:24:03,979 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-19 17:24:03,985 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-19 17:24:03,985 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-19 17:24:03,985 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-19 17:24:03,985 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-19 17:24:03,985 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-19 17:24:03,986 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-19 17:24:03,986 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-19 17:24:03,986 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-19 17:24:03,996 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-07-19 17:24:03,997 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-19 17:24:03,997 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-19 17:24:03,998 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-19 17:24:03,998 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-19 17:24:03,998 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:24:03,999 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:24:04,020 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || !(methaneLevelCritical == 0)) [2022-07-19 17:24:04,020 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) [2022-07-19 17:24:04,021 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && tmp == 0) && 1 == systemActive))) && (((!(1 == systemActive) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && tmp == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || 2 <= waterLevel) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-07-19 17:24:04,021 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-19 17:24:04,021 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((1 <= tmp && pumpRunning == 0) && \result == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2022-07-19 17:24:04,022 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-07-19 17:24:04,022 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-07-19 17:24:04,022 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-07-19 17:24:04,022 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-07-19 17:24:04,041 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-19 17:24:04,041 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-19 17:24:04,042 INFO L158 Benchmark]: Toolchain (without parser) took 8702.21ms. Allocated memory was 102.8MB in the beginning and 163.6MB in the end (delta: 60.8MB). Free memory was 61.3MB in the beginning and 65.8MB in the end (delta: -4.6MB). Peak memory consumption was 56.0MB. Max. memory is 16.1GB. [2022-07-19 17:24:04,042 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 102.8MB. Free memory was 79.0MB in the beginning and 78.9MB in the end (delta: 90.9kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-19 17:24:04,042 INFO L158 Benchmark]: CACSL2BoogieTranslator took 394.81ms. Allocated memory is still 102.8MB. Free memory was 61.1MB in the beginning and 67.3MB in the end (delta: -6.2MB). Peak memory consumption was 8.6MB. Max. memory is 16.1GB. [2022-07-19 17:24:04,043 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.15ms. Allocated memory is still 102.8MB. Free memory was 67.3MB in the beginning and 64.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-19 17:24:04,043 INFO L158 Benchmark]: Boogie Preprocessor took 23.79ms. Allocated memory is still 102.8MB. Free memory was 64.8MB in the beginning and 63.1MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-19 17:24:04,043 INFO L158 Benchmark]: RCFGBuilder took 510.39ms. Allocated memory is still 102.8MB. Free memory was 63.1MB in the beginning and 46.3MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-19 17:24:04,043 INFO L158 Benchmark]: TraceAbstraction took 7640.20ms. Allocated memory was 102.8MB in the beginning and 163.6MB in the end (delta: 60.8MB). Free memory was 45.9MB in the beginning and 71.1MB in the end (delta: -25.2MB). Peak memory consumption was 59.7MB. Max. memory is 16.1GB. [2022-07-19 17:24:04,044 INFO L158 Benchmark]: Witness Printer took 72.44ms. Allocated memory is still 163.6MB. Free memory was 71.1MB in the beginning and 65.8MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-19 17:24:04,045 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 102.8MB. Free memory was 79.0MB in the beginning and 78.9MB in the end (delta: 90.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 394.81ms. Allocated memory is still 102.8MB. Free memory was 61.1MB in the beginning and 67.3MB in the end (delta: -6.2MB). Peak memory consumption was 8.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 54.15ms. Allocated memory is still 102.8MB. Free memory was 67.3MB in the beginning and 64.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 23.79ms. Allocated memory is still 102.8MB. Free memory was 64.8MB in the beginning and 63.1MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 510.39ms. Allocated memory is still 102.8MB. Free memory was 63.1MB in the beginning and 46.3MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 7640.20ms. Allocated memory was 102.8MB in the beginning and 163.6MB in the end (delta: 60.8MB). Free memory was 45.9MB in the beginning and 71.1MB in the end (delta: -25.2MB). Peak memory consumption was 59.7MB. Max. memory is 16.1GB. * Witness Printer took 72.44ms. Allocated memory is still 163.6MB. Free memory was 71.1MB in the beginning and 65.8MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 868]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 96 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.6s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1387 SdHoareTripleChecker+Valid, 1.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1358 mSDsluCounter, 3580 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2265 mSDsCounter, 449 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1789 IncrementalHoareTripleChecker+Invalid, 2238 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 449 mSolverCounterUnsat, 1315 mSDtfsCounter, 1789 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 374 GetRequests, 269 SyntacticMatches, 1 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 147 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=518occurred in iteration=9, InterpolantAutomatonStates: 88, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 11 MinimizatonAttempts, 64 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 1304 PreInvPairs, 1493 NumberOfFragments, 1522 HoareAnnotationTreeSize, 1304 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 44 FomulaSimplificationsInter, 6629 FormulaSimplificationTreeSizeReductionInter, 2.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 754 NumberOfCodeBlocks, 754 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 741 ConstructedInterpolants, 0 QuantifiedInterpolants, 1490 SizeOfPredicates, 6 NumberOfNonLiveVariables, 905 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 90/105 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 882]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((((pumpRunning == \old(pumpRunning) && tmp == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && tmp == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && tmp == 0) && 1 == systemActive))) && (((!(1 == systemActive) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && tmp == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((!(1 == systemActive) || 2 <= waterLevel) || (((1 <= tmp && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 864]: Loop Invariant Derived loop invariant: (!(1 == systemActive) || !(1 <= methaneLevelCritical)) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 747]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 612]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 874]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 921]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 855]: Loop Invariant Derived loop invariant: ((1 <= methaneLevelCritical && 1 == systemActive) && splverifierCounter == 0) || ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 755]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 836]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 772]: Loop Invariant Derived loop invariant: (((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 791]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((1 <= tmp && pumpRunning == 0) && \result == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 621]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 557]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 912]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || (1 <= \result && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 632]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-07-19 17:24:04,085 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE