./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version eb692b52 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 80b4c453e300455caffbcb636daccd3af095acb6ed433fb3111a61f5db77a0b9 --- Real Ultimate output --- This is Ultimate 0.2.2-?-eb692b5 [2022-07-19 17:24:05,934 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-19 17:24:05,935 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-19 17:24:05,981 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-19 17:24:05,981 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-19 17:24:05,983 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-19 17:24:05,985 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-19 17:24:05,987 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-19 17:24:05,989 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-19 17:24:05,989 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-19 17:24:05,990 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-19 17:24:05,992 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-19 17:24:05,993 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-19 17:24:05,997 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-19 17:24:05,998 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-19 17:24:06,001 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-19 17:24:06,002 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-19 17:24:06,003 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-19 17:24:06,005 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-19 17:24:06,011 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-19 17:24:06,013 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-19 17:24:06,014 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-19 17:24:06,015 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-19 17:24:06,016 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-19 17:24:06,017 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-19 17:24:06,023 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-19 17:24:06,024 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-19 17:24:06,024 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-19 17:24:06,025 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-19 17:24:06,026 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-19 17:24:06,027 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-19 17:24:06,027 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-19 17:24:06,029 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-19 17:24:06,029 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-19 17:24:06,030 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-19 17:24:06,031 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-19 17:24:06,031 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-19 17:24:06,031 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-19 17:24:06,032 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-19 17:24:06,033 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-19 17:24:06,033 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-19 17:24:06,035 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-19 17:24:06,036 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-19 17:24:06,065 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-19 17:24:06,065 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-19 17:24:06,066 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-19 17:24:06,066 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-19 17:24:06,067 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-19 17:24:06,067 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-19 17:24:06,068 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-19 17:24:06,068 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-19 17:24:06,068 INFO L138 SettingsManager]: * Use SBE=true [2022-07-19 17:24:06,069 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-19 17:24:06,069 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-19 17:24:06,069 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-19 17:24:06,069 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-19 17:24:06,070 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-19 17:24:06,070 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-19 17:24:06,070 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-19 17:24:06,070 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-19 17:24:06,070 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-19 17:24:06,071 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-19 17:24:06,072 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-19 17:24:06,072 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-19 17:24:06,072 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-19 17:24:06,072 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-19 17:24:06,073 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-19 17:24:06,073 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:24:06,073 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-19 17:24:06,073 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-19 17:24:06,074 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-19 17:24:06,074 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-19 17:24:06,074 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-19 17:24:06,074 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-19 17:24:06,083 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-19 17:24:06,083 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-19 17:24:06,083 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 80b4c453e300455caffbcb636daccd3af095acb6ed433fb3111a61f5db77a0b9 [2022-07-19 17:24:06,319 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-19 17:24:06,358 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-19 17:24:06,364 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-19 17:24:06,365 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-19 17:24:06,365 INFO L275 PluginConnector]: CDTParser initialized [2022-07-19 17:24:06,367 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c [2022-07-19 17:24:06,426 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/581c792a1/21d971a3c45842a0a14cd25133dbba9c/FLAGae26c893a [2022-07-19 17:24:06,912 INFO L306 CDTParser]: Found 1 translation units. [2022-07-19 17:24:06,913 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c [2022-07-19 17:24:06,932 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/581c792a1/21d971a3c45842a0a14cd25133dbba9c/FLAGae26c893a [2022-07-19 17:24:07,248 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/581c792a1/21d971a3c45842a0a14cd25133dbba9c [2022-07-19 17:24:07,250 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-19 17:24:07,251 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-19 17:24:07,253 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-19 17:24:07,253 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-19 17:24:07,258 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-19 17:24:07,259 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:24:07" (1/1) ... [2022-07-19 17:24:07,260 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@171cd7c3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:24:07, skipping insertion in model container [2022-07-19 17:24:07,260 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.07 05:24:07" (1/1) ... [2022-07-19 17:24:07,267 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-19 17:24:07,304 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-19 17:24:07,414 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c[1605,1618] [2022-07-19 17:24:07,591 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:24:07,601 INFO L203 MainTranslator]: Completed pre-run [2022-07-19 17:24:07,618 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c[1605,1618] [2022-07-19 17:24:07,701 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-19 17:24:07,722 INFO L208 MainTranslator]: Completed translation [2022-07-19 17:24:07,722 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:24:07 WrapperNode [2022-07-19 17:24:07,722 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-19 17:24:07,723 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-19 17:24:07,724 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-19 17:24:07,724 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-19 17:24:07,730 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:24:07" (1/1) ... [2022-07-19 17:24:07,755 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:24:07" (1/1) ... [2022-07-19 17:24:07,777 INFO L137 Inliner]: procedures = 58, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 279 [2022-07-19 17:24:07,778 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-19 17:24:07,779 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-19 17:24:07,779 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-19 17:24:07,779 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-19 17:24:07,786 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:24:07" (1/1) ... [2022-07-19 17:24:07,786 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:24:07" (1/1) ... [2022-07-19 17:24:07,788 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:24:07" (1/1) ... [2022-07-19 17:24:07,789 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:24:07" (1/1) ... [2022-07-19 17:24:07,794 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:24:07" (1/1) ... [2022-07-19 17:24:07,799 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:24:07" (1/1) ... [2022-07-19 17:24:07,800 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:24:07" (1/1) ... [2022-07-19 17:24:07,803 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-19 17:24:07,804 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-19 17:24:07,804 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-19 17:24:07,804 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-19 17:24:07,805 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:24:07" (1/1) ... [2022-07-19 17:24:07,811 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-19 17:24:07,822 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:24:07,834 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-19 17:24:07,847 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-19 17:24:07,867 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-19 17:24:07,867 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-19 17:24:07,867 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-19 17:24:07,867 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-19 17:24:07,868 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-19 17:24:07,868 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-19 17:24:07,868 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-19 17:24:07,868 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-19 17:24:07,868 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-19 17:24:07,868 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-19 17:24:07,868 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-19 17:24:07,869 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-19 17:24:07,869 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-19 17:24:07,869 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-19 17:24:07,869 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-19 17:24:07,869 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-19 17:24:07,869 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-19 17:24:07,870 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-19 17:24:07,870 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-19 17:24:07,870 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-19 17:24:07,936 INFO L234 CfgBuilder]: Building ICFG [2022-07-19 17:24:07,937 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-19 17:24:08,228 INFO L275 CfgBuilder]: Performing block encoding [2022-07-19 17:24:08,234 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-19 17:24:08,234 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-19 17:24:08,236 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:24:08 BoogieIcfgContainer [2022-07-19 17:24:08,236 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-19 17:24:08,238 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-19 17:24:08,238 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-19 17:24:08,244 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-19 17:24:08,245 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.07 05:24:07" (1/3) ... [2022-07-19 17:24:08,245 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5efabe15 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:24:08, skipping insertion in model container [2022-07-19 17:24:08,245 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.07 05:24:07" (2/3) ... [2022-07-19 17:24:08,246 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5efabe15 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.07 05:24:08, skipping insertion in model container [2022-07-19 17:24:08,246 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:24:08" (3/3) ... [2022-07-19 17:24:08,247 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product59.cil.c [2022-07-19 17:24:08,256 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-19 17:24:08,257 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-19 17:24:08,298 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-19 17:24:08,303 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@7946603f, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@3abf8629 [2022-07-19 17:24:08,304 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-19 17:24:08,307 INFO L276 IsEmpty]: Start isEmpty. Operand has 100 states, 76 states have (on average 1.381578947368421) internal successors, (105), 85 states have internal predecessors, (105), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-19 17:24:08,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-19 17:24:08,316 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:08,317 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:08,317 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:08,323 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:08,323 INFO L85 PathProgramCache]: Analyzing trace with hash -13342285, now seen corresponding path program 1 times [2022-07-19 17:24:08,329 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:08,330 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [35673189] [2022-07-19 17:24:08,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:08,330 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:08,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:08,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-19 17:24:08,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:08,568 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:24:08,569 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:08,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [35673189] [2022-07-19 17:24:08,571 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [35673189] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:08,571 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:24:08,571 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-19 17:24:08,573 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [663152479] [2022-07-19 17:24:08,573 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:08,577 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-19 17:24:08,577 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:08,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-19 17:24:08,607 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:24:08,610 INFO L87 Difference]: Start difference. First operand has 100 states, 76 states have (on average 1.381578947368421) internal successors, (105), 85 states have internal predecessors, (105), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:24:08,662 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:08,662 INFO L93 Difference]: Finished difference Result 191 states and 260 transitions. [2022-07-19 17:24:08,663 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-19 17:24:08,664 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-19 17:24:08,665 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:08,679 INFO L225 Difference]: With dead ends: 191 [2022-07-19 17:24:08,680 INFO L226 Difference]: Without dead ends: 91 [2022-07-19 17:24:08,685 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-19 17:24:08,689 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:08,690 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 127 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:24:08,705 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-07-19 17:24:08,745 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2022-07-19 17:24:08,747 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 69 states have (on average 1.318840579710145) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-19 17:24:08,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 118 transitions. [2022-07-19 17:24:08,756 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 118 transitions. Word has length 25 [2022-07-19 17:24:08,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:08,756 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 118 transitions. [2022-07-19 17:24:08,757 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:24:08,758 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 118 transitions. [2022-07-19 17:24:08,760 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-19 17:24:08,760 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:08,761 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:08,761 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-19 17:24:08,761 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:08,763 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:08,763 INFO L85 PathProgramCache]: Analyzing trace with hash -1348159518, now seen corresponding path program 1 times [2022-07-19 17:24:08,763 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:08,764 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [639615189] [2022-07-19 17:24:08,764 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:08,765 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:08,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:08,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-19 17:24:08,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:08,872 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:24:08,876 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:08,877 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [639615189] [2022-07-19 17:24:08,877 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [639615189] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:08,878 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:24:08,878 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-19 17:24:08,879 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1074448274] [2022-07-19 17:24:08,879 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:08,880 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:24:08,881 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:08,881 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:24:08,882 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:24:08,882 INFO L87 Difference]: Start difference. First operand 91 states and 118 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:24:08,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:08,902 INFO L93 Difference]: Finished difference Result 143 states and 185 transitions. [2022-07-19 17:24:08,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:24:08,905 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-19 17:24:08,905 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:08,907 INFO L225 Difference]: With dead ends: 143 [2022-07-19 17:24:08,908 INFO L226 Difference]: Without dead ends: 82 [2022-07-19 17:24:08,914 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:24:08,916 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 16 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:08,917 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 189 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:24:08,920 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-07-19 17:24:08,928 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2022-07-19 17:24:08,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 71 states have internal predecessors, (84), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-19 17:24:08,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 106 transitions. [2022-07-19 17:24:08,933 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 106 transitions. Word has length 26 [2022-07-19 17:24:08,933 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:08,934 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 106 transitions. [2022-07-19 17:24:08,934 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:24:08,934 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 106 transitions. [2022-07-19 17:24:08,939 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-07-19 17:24:08,939 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:08,939 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:08,940 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-19 17:24:08,940 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:08,941 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:08,942 INFO L85 PathProgramCache]: Analyzing trace with hash 1571393351, now seen corresponding path program 1 times [2022-07-19 17:24:08,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:08,942 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [255628357] [2022-07-19 17:24:08,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:08,943 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:08,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:09,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-19 17:24:09,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:09,029 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:24:09,031 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:09,031 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [255628357] [2022-07-19 17:24:09,032 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [255628357] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:09,032 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:24:09,032 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-19 17:24:09,032 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [485771613] [2022-07-19 17:24:09,033 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:09,033 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:24:09,034 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:09,034 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:24:09,035 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:24:09,035 INFO L87 Difference]: Start difference. First operand 82 states and 106 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:24:09,068 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:09,072 INFO L93 Difference]: Finished difference Result 229 states and 302 transitions. [2022-07-19 17:24:09,073 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:24:09,073 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-07-19 17:24:09,074 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:09,077 INFO L225 Difference]: With dead ends: 229 [2022-07-19 17:24:09,077 INFO L226 Difference]: Without dead ends: 155 [2022-07-19 17:24:09,080 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-19 17:24:09,084 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 85 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:09,085 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 226 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:24:09,087 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2022-07-19 17:24:09,112 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 152. [2022-07-19 17:24:09,113 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 115 states have (on average 1.3565217391304347) internal successors, (156), 130 states have internal predecessors, (156), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-07-19 17:24:09,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 200 transitions. [2022-07-19 17:24:09,115 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 200 transitions. Word has length 30 [2022-07-19 17:24:09,115 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:09,115 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 200 transitions. [2022-07-19 17:24:09,116 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:24:09,116 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 200 transitions. [2022-07-19 17:24:09,118 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-07-19 17:24:09,118 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:09,119 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:09,119 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-19 17:24:09,119 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:09,120 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:09,120 INFO L85 PathProgramCache]: Analyzing trace with hash 1136396561, now seen corresponding path program 1 times [2022-07-19 17:24:09,120 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:09,120 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [729210903] [2022-07-19 17:24:09,121 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:09,122 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:09,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:09,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-19 17:24:09,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:09,242 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:24:09,242 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:09,242 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [729210903] [2022-07-19 17:24:09,243 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [729210903] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:09,243 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:24:09,243 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:24:09,243 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1430928279] [2022-07-19 17:24:09,243 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:09,245 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:24:09,245 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:09,245 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:24:09,245 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:24:09,246 INFO L87 Difference]: Start difference. First operand 152 states and 200 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:24:09,385 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:09,386 INFO L93 Difference]: Finished difference Result 438 states and 585 transitions. [2022-07-19 17:24:09,386 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-19 17:24:09,387 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-07-19 17:24:09,387 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:09,395 INFO L225 Difference]: With dead ends: 438 [2022-07-19 17:24:09,395 INFO L226 Difference]: Without dead ends: 294 [2022-07-19 17:24:09,396 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-07-19 17:24:09,401 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 74 mSDsluCounter, 404 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 518 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:09,403 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 518 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:24:09,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2022-07-19 17:24:09,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 288. [2022-07-19 17:24:09,446 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 288 states, 215 states have (on average 1.344186046511628) internal successors, (289), 244 states have internal predecessors, (289), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) [2022-07-19 17:24:09,449 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 288 states to 288 states and 379 transitions. [2022-07-19 17:24:09,449 INFO L78 Accepts]: Start accepts. Automaton has 288 states and 379 transitions. Word has length 34 [2022-07-19 17:24:09,450 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:09,450 INFO L495 AbstractCegarLoop]: Abstraction has 288 states and 379 transitions. [2022-07-19 17:24:09,450 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-19 17:24:09,450 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 379 transitions. [2022-07-19 17:24:09,453 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-19 17:24:09,454 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:09,454 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:09,454 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-19 17:24:09,454 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:09,455 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:09,455 INFO L85 PathProgramCache]: Analyzing trace with hash -373671891, now seen corresponding path program 1 times [2022-07-19 17:24:09,455 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:09,455 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [757780616] [2022-07-19 17:24:09,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:09,456 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:09,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:09,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-19 17:24:09,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:09,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:24:09,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:09,531 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:24:09,532 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:09,535 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [757780616] [2022-07-19 17:24:09,536 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [757780616] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:09,536 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:24:09,536 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:24:09,536 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [420930911] [2022-07-19 17:24:09,536 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:09,537 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:24:09,537 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:09,537 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:24:09,538 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:24:09,538 INFO L87 Difference]: Start difference. First operand 288 states and 379 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-19 17:24:09,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:09,804 INFO L93 Difference]: Finished difference Result 744 states and 996 transitions. [2022-07-19 17:24:09,805 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-19 17:24:09,805 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-07-19 17:24:09,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:09,808 INFO L225 Difference]: With dead ends: 744 [2022-07-19 17:24:09,808 INFO L226 Difference]: Without dead ends: 464 [2022-07-19 17:24:09,810 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-19 17:24:09,810 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 127 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 258 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 301 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 258 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:09,819 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [132 Valid, 205 Invalid, 301 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 258 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:24:09,821 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 464 states. [2022-07-19 17:24:09,859 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 464 to 450. [2022-07-19 17:24:09,860 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 450 states, 337 states have (on average 1.2967359050445104) internal successors, (437), 370 states have internal predecessors, (437), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) [2022-07-19 17:24:09,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 450 states to 450 states and 577 transitions. [2022-07-19 17:24:09,863 INFO L78 Accepts]: Start accepts. Automaton has 450 states and 577 transitions. Word has length 38 [2022-07-19 17:24:09,863 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:09,864 INFO L495 AbstractCegarLoop]: Abstraction has 450 states and 577 transitions. [2022-07-19 17:24:09,864 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-19 17:24:09,864 INFO L276 IsEmpty]: Start isEmpty. Operand 450 states and 577 transitions. [2022-07-19 17:24:09,865 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-19 17:24:09,865 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:09,866 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:09,866 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-19 17:24:09,866 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:09,867 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:09,867 INFO L85 PathProgramCache]: Analyzing trace with hash 1261041571, now seen corresponding path program 1 times [2022-07-19 17:24:09,867 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:09,867 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1786372068] [2022-07-19 17:24:09,867 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:09,868 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:09,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:09,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-19 17:24:09,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:09,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-19 17:24:09,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:09,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:24:09,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:09,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-19 17:24:09,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:09,934 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:24:09,935 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:09,935 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1786372068] [2022-07-19 17:24:09,935 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1786372068] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:09,935 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:24:09,935 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:24:09,936 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [565444074] [2022-07-19 17:24:09,936 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:09,936 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:24:09,936 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:09,937 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:24:09,937 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:24:09,937 INFO L87 Difference]: Start difference. First operand 450 states and 577 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-19 17:24:10,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:10,215 INFO L93 Difference]: Finished difference Result 1008 states and 1325 transitions. [2022-07-19 17:24:10,216 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-19 17:24:10,216 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-07-19 17:24:10,216 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:10,219 INFO L225 Difference]: With dead ends: 1008 [2022-07-19 17:24:10,219 INFO L226 Difference]: Without dead ends: 566 [2022-07-19 17:24:10,226 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-19 17:24:10,227 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 140 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 307 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 223 SdHoareTripleChecker+Invalid, 359 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 307 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:10,227 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [141 Valid, 223 Invalid, 359 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 307 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:24:10,228 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 566 states. [2022-07-19 17:24:10,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 566 to 544. [2022-07-19 17:24:10,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 544 states, 411 states have (on average 1.2627737226277371) internal successors, (519), 444 states have internal predecessors, (519), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-07-19 17:24:10,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 544 states to 544 states and 687 transitions. [2022-07-19 17:24:10,258 INFO L78 Accepts]: Start accepts. Automaton has 544 states and 687 transitions. Word has length 56 [2022-07-19 17:24:10,258 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:10,258 INFO L495 AbstractCegarLoop]: Abstraction has 544 states and 687 transitions. [2022-07-19 17:24:10,258 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-19 17:24:10,259 INFO L276 IsEmpty]: Start isEmpty. Operand 544 states and 687 transitions. [2022-07-19 17:24:10,260 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-19 17:24:10,260 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:10,260 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:10,260 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-19 17:24:10,261 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:10,261 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:10,261 INFO L85 PathProgramCache]: Analyzing trace with hash -1110697691, now seen corresponding path program 1 times [2022-07-19 17:24:10,261 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:10,261 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1704497818] [2022-07-19 17:24:10,262 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:10,262 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:10,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:10,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-19 17:24:10,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:10,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-19 17:24:10,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:10,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:24:10,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:10,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-19 17:24:10,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:10,341 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:24:10,341 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:10,341 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1704497818] [2022-07-19 17:24:10,341 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1704497818] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:10,341 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:24:10,342 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-19 17:24:10,342 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1789741613] [2022-07-19 17:24:10,342 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:10,344 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:24:10,344 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:10,344 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:24:10,344 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:24:10,345 INFO L87 Difference]: Start difference. First operand 544 states and 687 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-19 17:24:10,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:10,771 INFO L93 Difference]: Finished difference Result 1134 states and 1469 transitions. [2022-07-19 17:24:10,771 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-07-19 17:24:10,772 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2022-07-19 17:24:10,772 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:10,775 INFO L225 Difference]: With dead ends: 1134 [2022-07-19 17:24:10,775 INFO L226 Difference]: Without dead ends: 598 [2022-07-19 17:24:10,776 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=90, Invalid=182, Unknown=0, NotChecked=0, Total=272 [2022-07-19 17:24:10,777 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 367 mSDsluCounter, 124 mSDsCounter, 0 mSdLazyCounter, 413 mSolverCounterSat, 135 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 371 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 548 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 135 IncrementalHoareTripleChecker+Valid, 413 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:10,777 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [371 Valid, 239 Invalid, 548 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [135 Valid, 413 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-19 17:24:10,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 598 states. [2022-07-19 17:24:10,802 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 598 to 552. [2022-07-19 17:24:10,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 552 states, 419 states have (on average 1.2577565632458234) internal successors, (527), 452 states have internal predecessors, (527), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-07-19 17:24:10,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 552 states to 552 states and 695 transitions. [2022-07-19 17:24:10,806 INFO L78 Accepts]: Start accepts. Automaton has 552 states and 695 transitions. Word has length 56 [2022-07-19 17:24:10,807 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:10,807 INFO L495 AbstractCegarLoop]: Abstraction has 552 states and 695 transitions. [2022-07-19 17:24:10,807 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-19 17:24:10,807 INFO L276 IsEmpty]: Start isEmpty. Operand 552 states and 695 transitions. [2022-07-19 17:24:10,808 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-19 17:24:10,809 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:10,809 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:10,809 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-19 17:24:10,809 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:10,810 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:10,810 INFO L85 PathProgramCache]: Analyzing trace with hash 275505703, now seen corresponding path program 1 times [2022-07-19 17:24:10,810 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:10,810 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2137928526] [2022-07-19 17:24:10,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:10,811 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:10,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:10,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-19 17:24:10,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:10,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-19 17:24:10,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:10,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:24:10,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:10,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-19 17:24:10,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:10,874 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:24:10,874 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:10,874 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2137928526] [2022-07-19 17:24:10,874 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2137928526] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:10,874 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:24:10,875 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-19 17:24:10,875 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1721832282] [2022-07-19 17:24:10,875 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:10,875 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-19 17:24:10,876 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:10,876 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-19 17:24:10,876 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-19 17:24:10,876 INFO L87 Difference]: Start difference. First operand 552 states and 695 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-19 17:24:11,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:11,208 INFO L93 Difference]: Finished difference Result 1582 states and 2071 transitions. [2022-07-19 17:24:11,208 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-19 17:24:11,208 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2022-07-19 17:24:11,209 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:11,214 INFO L225 Difference]: With dead ends: 1582 [2022-07-19 17:24:11,214 INFO L226 Difference]: Without dead ends: 1038 [2022-07-19 17:24:11,216 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-19 17:24:11,217 INFO L413 NwaCegarLoop]: 139 mSDtfsCounter, 328 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 277 mSolverCounterSat, 126 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 331 SdHoareTripleChecker+Valid, 258 SdHoareTripleChecker+Invalid, 403 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 126 IncrementalHoareTripleChecker+Valid, 277 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:11,217 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [331 Valid, 258 Invalid, 403 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [126 Valid, 277 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-19 17:24:11,218 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1038 states. [2022-07-19 17:24:11,271 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1038 to 1026. [2022-07-19 17:24:11,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1026 states, 773 states have (on average 1.2276843467011642) internal successors, (949), 824 states have internal predecessors, (949), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) [2022-07-19 17:24:11,277 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1026 states to 1026 states and 1295 transitions. [2022-07-19 17:24:11,277 INFO L78 Accepts]: Start accepts. Automaton has 1026 states and 1295 transitions. Word has length 56 [2022-07-19 17:24:11,278 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:11,278 INFO L495 AbstractCegarLoop]: Abstraction has 1026 states and 1295 transitions. [2022-07-19 17:24:11,278 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-19 17:24:11,278 INFO L276 IsEmpty]: Start isEmpty. Operand 1026 states and 1295 transitions. [2022-07-19 17:24:11,280 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-07-19 17:24:11,280 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:11,280 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:11,280 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-19 17:24:11,280 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:11,281 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:11,281 INFO L85 PathProgramCache]: Analyzing trace with hash 1790739521, now seen corresponding path program 1 times [2022-07-19 17:24:11,281 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:11,281 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1131032255] [2022-07-19 17:24:11,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:11,282 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:11,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:11,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:24:11,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:11,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-19 17:24:11,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:11,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-19 17:24:11,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:11,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:24:11,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:11,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-19 17:24:11,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:11,435 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-19 17:24:11,436 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:11,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1131032255] [2022-07-19 17:24:11,436 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1131032255] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:24:11,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [360414040] [2022-07-19 17:24:11,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:11,437 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:24:11,437 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:24:11,439 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:24:11,455 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-19 17:24:11,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:11,535 INFO L263 TraceCheckSpWp]: Trace formula consists of 384 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-19 17:24:11,540 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:24:11,725 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-19 17:24:11,725 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-19 17:24:11,725 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [360414040] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:11,726 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-19 17:24:11,726 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 19 [2022-07-19 17:24:11,726 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1915543148] [2022-07-19 17:24:11,726 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:11,727 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-19 17:24:11,727 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:11,727 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-19 17:24:11,727 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=46, Invalid=296, Unknown=0, NotChecked=0, Total=342 [2022-07-19 17:24:11,728 INFO L87 Difference]: Start difference. First operand 1026 states and 1295 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-19 17:24:11,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:11,880 INFO L93 Difference]: Finished difference Result 2000 states and 2536 transitions. [2022-07-19 17:24:11,880 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-19 17:24:11,880 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2022-07-19 17:24:11,881 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:11,885 INFO L225 Difference]: With dead ends: 2000 [2022-07-19 17:24:11,886 INFO L226 Difference]: Without dead ends: 982 [2022-07-19 17:24:11,888 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=52, Invalid=328, Unknown=0, NotChecked=0, Total=380 [2022-07-19 17:24:11,889 INFO L413 NwaCegarLoop]: 190 mSDtfsCounter, 80 mSDsluCounter, 363 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 553 SdHoareTripleChecker+Invalid, 122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:11,889 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [82 Valid, 553 Invalid, 122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-19 17:24:11,891 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 982 states. [2022-07-19 17:24:11,928 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 982 to 978. [2022-07-19 17:24:11,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 978 states, 735 states have (on average 1.2122448979591838) internal successors, (891), 784 states have internal predecessors, (891), 126 states have call successors, (126), 114 states have call predecessors, (126), 116 states have return successors, (188), 122 states have call predecessors, (188), 126 states have call successors, (188) [2022-07-19 17:24:11,935 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 978 states to 978 states and 1205 transitions. [2022-07-19 17:24:11,935 INFO L78 Accepts]: Start accepts. Automaton has 978 states and 1205 transitions. Word has length 60 [2022-07-19 17:24:11,936 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:11,936 INFO L495 AbstractCegarLoop]: Abstraction has 978 states and 1205 transitions. [2022-07-19 17:24:11,936 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-19 17:24:11,936 INFO L276 IsEmpty]: Start isEmpty. Operand 978 states and 1205 transitions. [2022-07-19 17:24:11,938 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2022-07-19 17:24:11,939 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:11,939 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:11,967 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-19 17:24:12,155 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:24:12,156 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:12,156 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:12,156 INFO L85 PathProgramCache]: Analyzing trace with hash 1108761287, now seen corresponding path program 1 times [2022-07-19 17:24:12,156 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:12,156 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [819419003] [2022-07-19 17:24:12,156 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:12,157 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:12,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:24:12,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-19 17:24:12,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:24:12,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:24:12,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-19 17:24:12,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-07-19 17:24:12,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-07-19 17:24:12,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,250 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-19 17:24:12,250 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:12,250 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [819419003] [2022-07-19 17:24:12,250 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [819419003] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:12,251 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-19 17:24:12,251 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-19 17:24:12,251 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [531982489] [2022-07-19 17:24:12,251 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:12,252 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-19 17:24:12,252 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:12,252 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-19 17:24:12,252 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-07-19 17:24:12,253 INFO L87 Difference]: Start difference. First operand 978 states and 1205 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-07-19 17:24:12,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:12,624 INFO L93 Difference]: Finished difference Result 1315 states and 1625 transitions. [2022-07-19 17:24:12,624 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-07-19 17:24:12,625 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 87 [2022-07-19 17:24:12,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:12,628 INFO L225 Difference]: With dead ends: 1315 [2022-07-19 17:24:12,628 INFO L226 Difference]: Without dead ends: 585 [2022-07-19 17:24:12,630 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=86, Invalid=220, Unknown=0, NotChecked=0, Total=306 [2022-07-19 17:24:12,631 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 364 mSDsluCounter, 151 mSDsCounter, 0 mSdLazyCounter, 308 mSolverCounterSat, 136 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 373 SdHoareTripleChecker+Valid, 280 SdHoareTripleChecker+Invalid, 444 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 136 IncrementalHoareTripleChecker+Valid, 308 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:12,632 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [373 Valid, 280 Invalid, 444 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [136 Valid, 308 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-19 17:24:12,633 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 585 states. [2022-07-19 17:24:12,658 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 585 to 565. [2022-07-19 17:24:12,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 565 states, 425 states have (on average 1.1694117647058824) internal successors, (497), 455 states have internal predecessors, (497), 73 states have call successors, (73), 56 states have call predecessors, (73), 66 states have return successors, (120), 73 states have call predecessors, (120), 73 states have call successors, (120) [2022-07-19 17:24:12,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 565 states to 565 states and 690 transitions. [2022-07-19 17:24:12,661 INFO L78 Accepts]: Start accepts. Automaton has 565 states and 690 transitions. Word has length 87 [2022-07-19 17:24:12,662 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:12,662 INFO L495 AbstractCegarLoop]: Abstraction has 565 states and 690 transitions. [2022-07-19 17:24:12,662 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-07-19 17:24:12,662 INFO L276 IsEmpty]: Start isEmpty. Operand 565 states and 690 transitions. [2022-07-19 17:24:12,666 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-07-19 17:24:12,667 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:12,667 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:12,667 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-19 17:24:12,668 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:12,668 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:12,668 INFO L85 PathProgramCache]: Analyzing trace with hash -188705161, now seen corresponding path program 1 times [2022-07-19 17:24:12,668 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:12,669 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [788641450] [2022-07-19 17:24:12,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:12,669 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:12,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:24:12,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-19 17:24:12,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:24:12,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:24:12,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-19 17:24:12,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-07-19 17:24:12,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-07-19 17:24:12,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:24:12,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-07-19 17:24:12,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,766 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-07-19 17:24:12,767 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:12,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [788641450] [2022-07-19 17:24:12,767 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [788641450] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:24:12,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [179061396] [2022-07-19 17:24:12,767 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:12,767 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:24:12,768 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:24:12,769 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:24:12,776 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-19 17:24:12,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:12,863 INFO L263 TraceCheckSpWp]: Trace formula consists of 482 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-19 17:24:12,869 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:24:12,914 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-07-19 17:24:12,915 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-19 17:24:12,915 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [179061396] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:12,915 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-19 17:24:12,915 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2022-07-19 17:24:12,915 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [121396344] [2022-07-19 17:24:12,915 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:12,916 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-19 17:24:12,916 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:12,916 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-19 17:24:12,916 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2022-07-19 17:24:12,917 INFO L87 Difference]: Start difference. First operand 565 states and 690 transitions. Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-19 17:24:12,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:12,990 INFO L93 Difference]: Finished difference Result 1080 states and 1360 transitions. [2022-07-19 17:24:12,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-19 17:24:12,991 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-07-19 17:24:12,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:12,994 INFO L225 Difference]: With dead ends: 1080 [2022-07-19 17:24:12,994 INFO L226 Difference]: Without dead ends: 617 [2022-07-19 17:24:12,996 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 111 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=167, Unknown=0, NotChecked=0, Total=210 [2022-07-19 17:24:12,996 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 33 mSDsluCounter, 288 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 396 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:12,997 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 396 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:24:12,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 617 states. [2022-07-19 17:24:13,028 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 617 to 577. [2022-07-19 17:24:13,029 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 577 states, 437 states have (on average 1.1647597254004576) internal successors, (509), 467 states have internal predecessors, (509), 73 states have call successors, (73), 56 states have call predecessors, (73), 66 states have return successors, (120), 73 states have call predecessors, (120), 73 states have call successors, (120) [2022-07-19 17:24:13,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 577 states to 577 states and 702 transitions. [2022-07-19 17:24:13,033 INFO L78 Accepts]: Start accepts. Automaton has 577 states and 702 transitions. Word has length 98 [2022-07-19 17:24:13,033 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:13,033 INFO L495 AbstractCegarLoop]: Abstraction has 577 states and 702 transitions. [2022-07-19 17:24:13,033 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-19 17:24:13,033 INFO L276 IsEmpty]: Start isEmpty. Operand 577 states and 702 transitions. [2022-07-19 17:24:13,035 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-07-19 17:24:13,035 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:13,035 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:13,063 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-19 17:24:13,259 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-19 17:24:13,260 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:13,260 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:13,260 INFO L85 PathProgramCache]: Analyzing trace with hash -54691655, now seen corresponding path program 1 times [2022-07-19 17:24:13,260 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:13,260 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1945607098] [2022-07-19 17:24:13,260 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:13,261 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:13,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:24:13,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-19 17:24:13,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:24:13,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:24:13,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-19 17:24:13,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-07-19 17:24:13,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-07-19 17:24:13,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:24:13,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-07-19 17:24:13,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,338 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-07-19 17:24:13,338 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:13,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1945607098] [2022-07-19 17:24:13,338 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1945607098] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:24:13,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1433961587] [2022-07-19 17:24:13,339 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:13,339 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:24:13,339 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:24:13,340 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:24:13,341 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-19 17:24:13,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,432 INFO L263 TraceCheckSpWp]: Trace formula consists of 481 conjuncts, 7 conjunts are in the unsatisfiable core [2022-07-19 17:24:13,437 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:24:13,492 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:24:13,492 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-19 17:24:13,492 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1433961587] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-19 17:24:13,493 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-19 17:24:13,493 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-07-19 17:24:13,493 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1271667435] [2022-07-19 17:24:13,493 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-19 17:24:13,494 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-19 17:24:13,494 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:13,494 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-19 17:24:13,494 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:24:13,495 INFO L87 Difference]: Start difference. First operand 577 states and 702 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-19 17:24:13,544 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:13,545 INFO L93 Difference]: Finished difference Result 906 states and 1139 transitions. [2022-07-19 17:24:13,545 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-19 17:24:13,545 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-07-19 17:24:13,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:13,549 INFO L225 Difference]: With dead ends: 906 [2022-07-19 17:24:13,549 INFO L226 Difference]: Without dead ends: 904 [2022-07-19 17:24:13,550 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-19 17:24:13,552 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 47 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:13,552 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 193 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-19 17:24:13,553 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 904 states. [2022-07-19 17:24:13,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 904 to 703. [2022-07-19 17:24:13,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 703 states, 535 states have (on average 1.1775700934579438) internal successors, (630), 571 states have internal predecessors, (630), 89 states have call successors, (89), 67 states have call predecessors, (89), 78 states have return successors, (158), 86 states have call predecessors, (158), 89 states have call successors, (158) [2022-07-19 17:24:13,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 703 states to 703 states and 877 transitions. [2022-07-19 17:24:13,618 INFO L78 Accepts]: Start accepts. Automaton has 703 states and 877 transitions. Word has length 98 [2022-07-19 17:24:13,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:13,619 INFO L495 AbstractCegarLoop]: Abstraction has 703 states and 877 transitions. [2022-07-19 17:24:13,619 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-19 17:24:13,619 INFO L276 IsEmpty]: Start isEmpty. Operand 703 states and 877 transitions. [2022-07-19 17:24:13,622 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2022-07-19 17:24:13,622 INFO L187 NwaCegarLoop]: Found error trace [2022-07-19 17:24:13,622 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:13,651 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-19 17:24:13,836 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:24:13,837 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-19 17:24:13,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-19 17:24:13,837 INFO L85 PathProgramCache]: Analyzing trace with hash -1162464621, now seen corresponding path program 1 times [2022-07-19 17:24:13,837 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-19 17:24:13,837 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [66820787] [2022-07-19 17:24:13,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:13,838 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-19 17:24:13,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-19 17:24:13,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-19 17:24:13,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-19 17:24:13,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-19 17:24:13,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-19 17:24:13,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-07-19 17:24:13,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-07-19 17:24:13,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-07-19 17:24:13,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:24:13,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-19 17:24:13,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-07-19 17:24:13,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-19 17:24:13,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2022-07-19 17:24:13,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:13,979 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 56 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-07-19 17:24:13,980 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-19 17:24:13,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [66820787] [2022-07-19 17:24:13,980 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [66820787] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-19 17:24:13,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1206417120] [2022-07-19 17:24:13,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-19 17:24:13,980 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:24:13,980 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-19 17:24:13,982 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-19 17:24:14,005 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-07-19 17:24:14,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-19 17:24:14,091 INFO L263 TraceCheckSpWp]: Trace formula consists of 588 conjuncts, 11 conjunts are in the unsatisfiable core [2022-07-19 17:24:14,094 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-19 17:24:14,312 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 79 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-19 17:24:14,312 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-19 17:24:14,574 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 57 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-07-19 17:24:14,574 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1206417120] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-19 17:24:14,574 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-19 17:24:14,574 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 20 [2022-07-19 17:24:14,574 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1438282415] [2022-07-19 17:24:14,574 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-19 17:24:14,583 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-07-19 17:24:14,583 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-19 17:24:14,583 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-07-19 17:24:14,583 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=305, Unknown=0, NotChecked=0, Total=380 [2022-07-19 17:24:14,584 INFO L87 Difference]: Start difference. First operand 703 states and 877 transitions. Second operand has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-07-19 17:24:15,595 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-19 17:24:15,596 INFO L93 Difference]: Finished difference Result 1222 states and 1500 transitions. [2022-07-19 17:24:15,596 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-07-19 17:24:15,596 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 139 [2022-07-19 17:24:15,597 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-19 17:24:15,597 INFO L225 Difference]: With dead ends: 1222 [2022-07-19 17:24:15,597 INFO L226 Difference]: Without dead ends: 0 [2022-07-19 17:24:15,601 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 337 GetRequests, 295 SyntacticMatches, 5 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 302 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=327, Invalid=1155, Unknown=0, NotChecked=0, Total=1482 [2022-07-19 17:24:15,602 INFO L413 NwaCegarLoop]: 160 mSDtfsCounter, 546 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 1101 mSolverCounterSat, 252 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 547 SdHoareTripleChecker+Valid, 491 SdHoareTripleChecker+Invalid, 1353 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 252 IncrementalHoareTripleChecker+Valid, 1101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-07-19 17:24:15,602 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [547 Valid, 491 Invalid, 1353 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [252 Valid, 1101 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-07-19 17:24:15,603 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-19 17:24:15,603 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-19 17:24:15,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-19 17:24:15,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-19 17:24:15,603 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 139 [2022-07-19 17:24:15,603 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-19 17:24:15,604 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-19 17:24:15,604 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-07-19 17:24:15,604 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-19 17:24:15,604 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-19 17:24:15,607 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-19 17:24:15,635 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-07-19 17:24:15,829 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-19 17:24:15,831 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-19 17:24:21,360 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 183 190) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse4) (or .cse0 .cse3 .cse2 .cse5))) [2022-07-19 17:24:21,361 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 183 190) no Hoare annotation was computed. [2022-07-19 17:24:21,361 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 183 190) no Hoare annotation was computed. [2022-07-19 17:24:21,361 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 98 104) no Hoare annotation was computed. [2022-07-19 17:24:21,361 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 98 104) the Hoare annotation is: true [2022-07-19 17:24:21,361 INFO L899 garLoopResultBuilder]: For program point L942-1(lines 938 949) no Hoare annotation was computed. [2022-07-19 17:24:21,361 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 938 949) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse6 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse4) (or .cse5 .cse0 .cse1 .cse2 .cse4) (or .cse5 .cse0 .cse2 .cse6) (or .cse0 .cse2 .cse3 .cse6))) [2022-07-19 17:24:21,361 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 938 949) no Hoare annotation was computed. [2022-07-19 17:24:21,361 INFO L902 garLoopResultBuilder]: At program point L417(line 417) the Hoare annotation is: true [2022-07-19 17:24:21,361 INFO L899 garLoopResultBuilder]: For program point L417-1(line 417) no Hoare annotation was computed. [2022-07-19 17:24:21,361 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 411 440) no Hoare annotation was computed. [2022-07-19 17:24:21,361 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 411 440) the Hoare annotation is: true [2022-07-19 17:24:21,361 INFO L902 garLoopResultBuilder]: At program point L436(lines 411 440) the Hoare annotation is: true [2022-07-19 17:24:21,362 INFO L899 garLoopResultBuilder]: For program point L432(line 432) no Hoare annotation was computed. [2022-07-19 17:24:21,362 INFO L899 garLoopResultBuilder]: For program point L425(lines 425 429) no Hoare annotation was computed. [2022-07-19 17:24:21,362 INFO L902 garLoopResultBuilder]: At program point L425-1(lines 425 429) the Hoare annotation is: true [2022-07-19 17:24:21,362 INFO L899 garLoopResultBuilder]: For program point L422(line 422) no Hoare annotation was computed. [2022-07-19 17:24:21,362 INFO L902 garLoopResultBuilder]: At program point L421-2(lines 421 435) the Hoare annotation is: true [2022-07-19 17:24:21,362 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 950 958) the Hoare annotation is: true [2022-07-19 17:24:21,362 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 950 958) no Hoare annotation was computed. [2022-07-19 17:24:21,362 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 950 958) no Hoare annotation was computed. [2022-07-19 17:24:21,364 INFO L899 garLoopResultBuilder]: For program point L386-1(line 386) no Hoare annotation was computed. [2022-07-19 17:24:21,364 INFO L895 garLoopResultBuilder]: At program point L151(line 151) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (= 0 ~systemActive~0)))) (and (or (and .cse0 .cse1 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 (and .cse0 .cse7 .cse8) .cse3) (or .cse5 .cse6 .cse2 .cse9 (and .cse1 .cse7 .cse8)) (or .cse6 .cse2 .cse9 (and .cse0 .cse1) .cse4) (or .cse5 .cse3 .cse10) (or .cse5 .cse9 .cse10))) [2022-07-19 17:24:21,364 INFO L895 garLoopResultBuilder]: At program point L151-1(lines 132 156) the Hoare annotation is: (let ((.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse16 (= 1 ~systemActive~0))) (let ((.cse8 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse11 (<= 2 ~waterLevel~0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not .cse16)) (.cse12 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse10 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse13 (let ((.cse17 (= ~waterLevel~0 0))) (or (and (not .cse17) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0)) (and .cse17 (= |timeShift_isLowWaterLevel_~tmp~4#1| 1))))) (.cse3 (not .cse15)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse14 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6)) (or .cse0 .cse7 .cse8) (or .cse0 .cse3 .cse8) (or (and .cse9 .cse4 .cse10) .cse2 .cse7 (and .cse11 .cse10) (and .cse12 .cse4 .cse10 .cse13) .cse14) (or .cse0 .cse1 .cse2 (and .cse9 .cse5 .cse6) .cse7 (and .cse11 .cse5)) (or .cse1 .cse2 (and .cse12 .cse4 .cse15 .cse16 .cse10 .cse13) .cse3 (and .cse9 .cse4 .cse15 .cse16) .cse14)))) [2022-07-19 17:24:21,364 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2022-07-19 17:24:21,365 INFO L899 garLoopResultBuilder]: For program point L275(lines 275 279) no Hoare annotation was computed. [2022-07-19 17:24:21,365 INFO L895 garLoopResultBuilder]: At program point L1010(lines 1005 1013) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= 0 ~systemActive~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse7 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 (and .cse5 .cse6 .cse7) .cse8) (or .cse0 .cse4 .cse9) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse3 .cse9) (or .cse1 .cse2 .cse3 (and .cse5 .cse6 (= ~methAndRunningLastTime~0 0) .cse7) .cse8))) [2022-07-19 17:24:21,365 INFO L899 garLoopResultBuilder]: For program point L275-2(lines 275 279) no Hoare annotation was computed. [2022-07-19 17:24:21,365 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 74 97) no Hoare annotation was computed. [2022-07-19 17:24:21,365 INFO L899 garLoopResultBuilder]: For program point L78-1(lines 77 96) no Hoare annotation was computed. [2022-07-19 17:24:21,365 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 148) no Hoare annotation was computed. [2022-07-19 17:24:21,365 INFO L899 garLoopResultBuilder]: For program point L136(lines 136 153) no Hoare annotation was computed. [2022-07-19 17:24:21,365 INFO L899 garLoopResultBuilder]: For program point L392(lines 392 402) no Hoare annotation was computed. [2022-07-19 17:24:21,365 INFO L899 garLoopResultBuilder]: For program point L388(lines 388 405) no Hoare annotation was computed. [2022-07-19 17:24:21,366 INFO L895 garLoopResultBuilder]: At program point L388-1(lines 380 408) the Hoare annotation is: (let ((.cse16 (= 1 ~systemActive~0))) (let ((.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse7 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (let ((.cse17 (= ~waterLevel~0 0))) (or (and (not .cse17) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0)) (and .cse17 (= |timeShift_isLowWaterLevel_~tmp~4#1| 1))))) (.cse14 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse11 (not .cse16)) (.cse12 (not (= ~methaneLevelCritical~0 0))) (.cse13 (<= 2 ~waterLevel~0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4) (or (and .cse5 .cse1 .cse6 .cse7 .cse8 .cse9) (and .cse10 .cse1 .cse6 .cse7 .cse9) .cse11 .cse12 (and .cse6 .cse13 .cse7 .cse9) .cse14) (or .cse15 .cse11 .cse3 (and .cse10 .cse1 .cse16) (and .cse5 .cse1 .cse6 .cse16 .cse7 .cse8) .cse14) (or .cse0 .cse15 .cse11 .cse3 (and .cse1 .cse6 .cse16 .cse2)) (or .cse0 .cse12 (and .cse1 .cse2 .cse9) .cse4) (or (and .cse1 .cse6 .cse2 .cse9) .cse0 .cse15 .cse11 .cse12 (and .cse13 .cse2))))) [2022-07-19 17:24:21,366 INFO L895 garLoopResultBuilder]: At program point L281(lines 266 284) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~1#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse4) (or .cse1 .cse2 .cse6 .cse3 .cse7) (or .cse2 .cse6 .cse4 .cse7) (or .cse0 .cse3 .cse5))) [2022-07-19 17:24:21,366 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-07-19 17:24:21,366 INFO L895 garLoopResultBuilder]: At program point L207(lines 202 210) the Hoare annotation is: (let ((.cse10 (<= 1 ~methaneLevelCritical~0)) (.cse11 (= 1 ~systemActive~0))) (let ((.cse6 (not (= 0 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse13 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (not .cse11)) (.cse1 (not .cse10))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5) .cse6) (or .cse0 .cse7 .cse6) (or .cse0 .cse8 .cse9 .cse7) (or .cse8 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 .cse10 .cse3 .cse11 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse9 .cse1 (and .cse12 .cse2 .cse10 .cse3 .cse11) .cse13) (or .cse9 .cse7 .cse13) (or .cse0 (and .cse12 .cse3 .cse4 .cse5) .cse8 .cse9 .cse1)))) [2022-07-19 17:24:21,366 INFO L899 garLoopResultBuilder]: For program point L393(lines 393 399) no Hoare annotation was computed. [2022-07-19 17:24:21,367 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse3 .cse5) (or .cse2 .cse4 .cse6) (or .cse1 .cse2 .cse3 .cse6))) [2022-07-19 17:24:21,367 INFO L899 garLoopResultBuilder]: For program point L918(lines 918 922) no Hoare annotation was computed. [2022-07-19 17:24:21,367 INFO L895 garLoopResultBuilder]: At program point L918-2(lines 914 925) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse3 .cse5) (or (and .cse6 (= ~methAndRunningLastTime~0 0) .cse7) .cse1 .cse2 .cse3 .cse8) (or .cse2 .cse4 (and .cse6 .cse7) .cse8))) [2022-07-19 17:24:21,367 INFO L895 garLoopResultBuilder]: At program point L146(line 146) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse3 .cse5) (or .cse2 .cse4 .cse6) (or .cse1 .cse2 .cse3 .cse6))) [2022-07-19 17:24:21,367 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 74 97) the Hoare annotation is: (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse10)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (= 0 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse7 (and (= ~pumpRunning~0 0) .cse9 .cse10))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8) (or .cse1 .cse3 .cse6 .cse4) (or .cse5 .cse0 .cse1 .cse2 .cse7) (or .cse5 .cse2 .cse7 .cse8) (or .cse5 .cse0 .cse1 .cse6 .cse7)))) [2022-07-19 17:24:21,367 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= 0 ~systemActive~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (let ((.cse8 (= ~waterLevel~0 0))) (or (and (not .cse8) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0)) (and .cse8 (= |timeShift_isLowWaterLevel_~tmp~4#1| 1)))))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse6) (or .cse0 .cse3 .cse7) (or .cse2 .cse6 .cse4 .cse5))) [2022-07-19 17:24:21,367 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 74 97) no Hoare annotation was computed. [2022-07-19 17:24:21,367 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-07-19 17:24:21,367 INFO L895 garLoopResultBuilder]: At program point L386(line 386) the Hoare annotation is: (let ((.cse16 (<= 1 ~methaneLevelCritical~0)) (.cse17 (= 1 ~systemActive~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse2 (and .cse8 .cse14 .cse15)) (.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse10 (<= 2 ~waterLevel~0)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not .cse17)) (.cse11 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse9 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse12 (let ((.cse18 (= ~waterLevel~0 0))) (or (and (not .cse18) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0)) (and .cse18 (= |timeShift_isLowWaterLevel_~tmp~4#1| 1))))) (.cse6 (not .cse16)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse6 .cse2) (or .cse0 .cse6 .cse2 .cse3) (or (and .cse7 .cse8 .cse9) .cse5 .cse1 (and .cse10 .cse9) (and .cse11 .cse8 .cse9 .cse12) .cse13) (or .cse0 .cse4 .cse5 (and .cse7 .cse14 .cse15) .cse1 (and .cse10 .cse14)) (or .cse4 .cse5 (and .cse11 .cse8 .cse16 .cse17 .cse9 .cse12) .cse6 (and .cse7 .cse8 .cse16 .cse17) .cse13)))) [2022-07-19 17:24:21,367 INFO L899 garLoopResultBuilder]: For program point L316(lines 316 320) no Hoare annotation was computed. [2022-07-19 17:24:21,367 INFO L895 garLoopResultBuilder]: At program point L469(lines 465 471) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:24:21,368 INFO L895 garLoopResultBuilder]: At program point L362(lines 313 363) the Hoare annotation is: false [2022-07-19 17:24:21,368 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-19 17:24:21,368 INFO L899 garLoopResultBuilder]: For program point L350(lines 350 356) no Hoare annotation was computed. [2022-07-19 17:24:21,368 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-19 17:24:21,368 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-19 17:24:21,368 INFO L895 garLoopResultBuilder]: At program point L540(lines 535 543) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:24:21,368 INFO L895 garLoopResultBuilder]: At program point L350-2(lines 344 357) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 0 ~systemActive~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse4 .cse6) (and .cse5 .cse0 .cse1 .cse3 .cse4) (and .cse5 .cse0 .cse7 .cse3 .cse4) (and .cse5 .cse7 .cse4 .cse6) (and .cse7 .cse2 .cse3 .cse4))) [2022-07-19 17:24:21,368 INFO L895 garLoopResultBuilder]: At program point L532(lines 528 534) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:24:21,368 INFO L899 garLoopResultBuilder]: For program point L334(lines 334 340) no Hoare annotation was computed. [2022-07-19 17:24:21,369 INFO L899 garLoopResultBuilder]: For program point L334-1(lines 334 340) no Hoare annotation was computed. [2022-07-19 17:24:21,369 INFO L895 garLoopResultBuilder]: At program point L297(lines 285 299) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2022-07-19 17:24:21,369 INFO L895 garLoopResultBuilder]: At program point L359(lines 314 361) the Hoare annotation is: (let ((.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse4 .cse5 .cse3 .cse6) (and .cse4 .cse0 .cse5 .cse2 .cse3) (and .cse4 .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse3 .cse6))) [2022-07-19 17:24:21,369 INFO L895 garLoopResultBuilder]: At program point L326(line 326) the Hoare annotation is: (let ((.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse4 .cse5 .cse3 .cse6) (and .cse4 .cse0 .cse5 .cse2 .cse3) (and .cse4 .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse3 .cse6))) [2022-07-19 17:24:21,369 INFO L899 garLoopResultBuilder]: For program point L289(lines 289 295) no Hoare annotation was computed. [2022-07-19 17:24:21,369 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-19 17:24:21,369 INFO L899 garLoopResultBuilder]: For program point L289-1(lines 289 295) no Hoare annotation was computed. [2022-07-19 17:24:21,369 INFO L899 garLoopResultBuilder]: For program point L496(lines 496 503) no Hoare annotation was computed. [2022-07-19 17:24:21,369 INFO L899 garLoopResultBuilder]: For program point L496-2(lines 496 503) no Hoare annotation was computed. [2022-07-19 17:24:21,370 INFO L895 garLoopResultBuilder]: At program point L525(lines 521 527) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:24:21,370 INFO L902 garLoopResultBuilder]: At program point L480(lines 472 482) the Hoare annotation is: true [2022-07-19 17:24:21,370 INFO L899 garLoopResultBuilder]: For program point L315(lines 314 361) no Hoare annotation was computed. [2022-07-19 17:24:21,370 INFO L895 garLoopResultBuilder]: At program point L377(lines 372 379) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-19 17:24:21,370 INFO L902 garLoopResultBuilder]: At program point L505(lines 486 508) the Hoare annotation is: true [2022-07-19 17:24:21,370 INFO L899 garLoopResultBuilder]: For program point L344(lines 344 357) no Hoare annotation was computed. [2022-07-19 17:24:21,370 INFO L895 garLoopResultBuilder]: At program point L336(line 336) the Hoare annotation is: (let ((.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse4 .cse5 .cse3 .cse6) (and .cse4 .cse0 .cse5 .cse2 .cse3) (and .cse4 .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse3 .cse6))) [2022-07-19 17:24:21,370 INFO L902 garLoopResultBuilder]: At program point L365(lines 304 369) the Hoare annotation is: true [2022-07-19 17:24:21,370 INFO L899 garLoopResultBuilder]: For program point L324(lines 324 330) no Hoare annotation was computed. [2022-07-19 17:24:21,371 INFO L899 garLoopResultBuilder]: For program point L324-1(lines 324 330) no Hoare annotation was computed. [2022-07-19 17:24:21,371 INFO L895 garLoopResultBuilder]: At program point L291(line 291) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2) (and .cse3 .cse4 .cse2 .cse5) (and .cse3 .cse1 .cse2) (and .cse0 .cse4 .cse2 .cse5))) [2022-07-19 17:24:21,371 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 106 130) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~waterLevel~0 0))) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse7) (or .cse5 .cse6 .cse1 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse7))) [2022-07-19 17:24:21,371 INFO L899 garLoopResultBuilder]: For program point L256(lines 256 260) no Hoare annotation was computed. [2022-07-19 17:24:21,371 INFO L899 garLoopResultBuilder]: For program point L256-2(lines 256 260) no Hoare annotation was computed. [2022-07-19 17:24:21,375 INFO L895 garLoopResultBuilder]: At program point L120(line 120) the Hoare annotation is: (let ((.cse8 (= ~methaneLevelCritical~0 0)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (= ~pumpRunning~0 0)) (.cse12 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) (.cse9 (= 1 ~systemActive~0))) (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and .cse10 .cse11 .cse12 .cse9)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (and .cse10 .cse11 .cse8 .cse12 .cse9)) (.cse2 (not .cse9)) (.cse5 (not (= ~waterLevel~0 0))) (.cse3 (not .cse8))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6 .cse7) (or .cse1 .cse4 .cse2 .cse6 .cse7) (or .cse0 .cse2 .cse5 .cse3)))) [2022-07-19 17:24:21,375 INFO L899 garLoopResultBuilder]: For program point L114(lines 114 122) no Hoare annotation was computed. [2022-07-19 17:24:21,375 INFO L899 garLoopResultBuilder]: For program point L110(lines 110 127) no Hoare annotation was computed. [2022-07-19 17:24:21,375 INFO L895 garLoopResultBuilder]: At program point L1000(lines 991 1004) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse11 (= ~methaneLevelCritical~0 0)) (.cse12 (= 1 ~systemActive~0))) (let ((.cse1 (not (= ~waterLevel~0 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse12)) (.cse2 (not .cse11)) (.cse8 (and .cse5 (<= 2 ~waterLevel~0))) (.cse3 (and .cse10 .cse5 .cse11 .cse6 .cse12))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 (and .cse5 .cse6) .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse7 (and .cse10 .cse5) .cse9) (or .cse4 .cse0 .cse2 .cse8 .cse3)))) [2022-07-19 17:24:21,375 INFO L895 garLoopResultBuilder]: At program point L162(lines 157 164) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~waterLevel~0 0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 (<= 2 ~waterLevel~0) .cse5) (or .cse4 .cse0 .cse2 .cse3) (or .cse0 .cse1 .cse5))) [2022-07-19 17:24:21,376 INFO L895 garLoopResultBuilder]: At program point L125(line 125) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~waterLevel~0 0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse3 .cse4) (or .cse5 .cse1 .cse6) (or .cse0 .cse1 .cse2 .cse6))) [2022-07-19 17:24:21,376 INFO L899 garLoopResultBuilder]: For program point L125-1(lines 106 130) no Hoare annotation was computed. [2022-07-19 17:24:21,376 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 106 130) no Hoare annotation was computed. [2022-07-19 17:24:21,376 INFO L899 garLoopResultBuilder]: For program point L173(lines 173 179) no Hoare annotation was computed. [2022-07-19 17:24:21,376 INFO L895 garLoopResultBuilder]: At program point L173-2(lines 166 182) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~waterLevel~0 0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (and (= ~pumpRunning~0 0) .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~2#1|)) .cse4) (or .cse1 .cse5 .cse2 .cse4) (or .cse0 .cse1 .cse3 .cse6) (or .cse1 .cse5 .cse6))) [2022-07-19 17:24:21,376 INFO L895 garLoopResultBuilder]: At program point L262(lines 247 265) the Hoare annotation is: (let ((.cse11 (= ~methaneLevelCritical~0 0)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse12 (= 1 ~systemActive~0)) (.cse13 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (.cse14 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) (.cse15 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0)))) (let ((.cse1 (not (= ~waterLevel~0 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (and .cse10 .cse9 .cse12 .cse13 .cse14 .cse15)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse12)) (.cse5 (not .cse11)) (.cse6 (and .cse10 .cse9 .cse11 .cse12 .cse13 .cse14 .cse15)) (.cse8 (and .cse9 (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6) (or .cse7 .cse0 .cse2 .cse8 .cse3 .cse4) (or .cse7 .cse0 .cse5 .cse6 .cse8)))) [2022-07-19 17:24:21,376 INFO L895 garLoopResultBuilder]: At program point L198(lines 191 201) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~waterLevel~0 0))) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse2 (and .cse5 .cse6 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|)) .cse3) (or .cse4 .cse0 .cse7 (and .cse5 .cse6)) (or .cse0 .cse1 .cse7))) [2022-07-19 17:24:21,377 INFO L895 garLoopResultBuilder]: At program point L196(line 196) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~waterLevel~0 0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse2 .cse5 .cse3) (or .cse4 .cse0 .cse6 .cse5) (or .cse0 .cse1 .cse6))) [2022-07-19 17:24:21,377 INFO L899 garLoopResultBuilder]: For program point L995(lines 995 1001) no Hoare annotation was computed. [2022-07-19 17:24:21,377 INFO L899 garLoopResultBuilder]: For program point L196-1(line 196) no Hoare annotation was computed. [2022-07-19 17:24:21,377 INFO L899 garLoopResultBuilder]: For program point L930-1(lines 926 937) no Hoare annotation was computed. [2022-07-19 17:24:21,377 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 926 937) no Hoare annotation was computed. [2022-07-19 17:24:21,377 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 926 937) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse5) (or .cse1 .cse6 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse6 .cse3 .cse5) (or .cse0 .cse1 .cse6 .cse3 .cse4))) [2022-07-19 17:24:21,380 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-19 17:24:21,381 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-19 17:24:21,425 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.07 05:24:21 BoogieIcfgContainer [2022-07-19 17:24:21,425 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-19 17:24:21,426 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-19 17:24:21,426 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-19 17:24:21,426 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-19 17:24:21,427 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.07 05:24:08" (3/4) ... [2022-07-19 17:24:21,430 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-19 17:24:21,434 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-19 17:24:21,435 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-19 17:24:21,435 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-19 17:24:21,435 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-19 17:24:21,435 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-19 17:24:21,435 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-19 17:24:21,435 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-19 17:24:21,436 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-19 17:24:21,442 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-07-19 17:24:21,443 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-19 17:24:21,443 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-19 17:24:21,444 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-19 17:24:21,444 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-19 17:24:21,445 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:24:21,445 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-19 17:24:21,464 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) [2022-07-19 17:24:21,464 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || (((\result == 0 && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 == systemActive)) || !(2 <= \old(waterLevel))) [2022-07-19 17:24:21,465 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1))) && tmp == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && tmp == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methAndRunningLastTime == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && tmp == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) || (((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && tmp == 0)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) [2022-07-19 17:24:21,465 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) [2022-07-19 17:24:21,466 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || ((((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == 0) && 1 == systemActive) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) [2022-07-19 17:24:21,466 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) [2022-07-19 17:24:21,466 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) [2022-07-19 17:24:21,466 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(\result == 0)) && 1 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && ((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(\result == 0)) && 1 == systemActive)) [2022-07-19 17:24:21,467 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) [2022-07-19 17:24:21,467 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) [2022-07-19 17:24:21,467 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-07-19 17:24:21,467 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) && (((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-07-19 17:24:21,510 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-19 17:24:21,511 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-19 17:24:21,511 INFO L158 Benchmark]: Toolchain (without parser) took 14260.00ms. Allocated memory was 88.1MB in the beginning and 188.7MB in the end (delta: 100.7MB). Free memory was 49.8MB in the beginning and 88.1MB in the end (delta: -38.3MB). Peak memory consumption was 64.3MB. Max. memory is 16.1GB. [2022-07-19 17:24:21,512 INFO L158 Benchmark]: CDTParser took 0.21ms. Allocated memory is still 88.1MB. Free memory is still 67.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-19 17:24:21,512 INFO L158 Benchmark]: CACSL2BoogieTranslator took 470.18ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 49.6MB in the beginning and 83.1MB in the end (delta: -33.5MB). Peak memory consumption was 24.5MB. Max. memory is 16.1GB. [2022-07-19 17:24:21,513 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.60ms. Allocated memory is still 107.0MB. Free memory was 83.1MB in the beginning and 80.3MB in the end (delta: 2.8MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-19 17:24:21,513 INFO L158 Benchmark]: Boogie Preprocessor took 24.60ms. Allocated memory is still 107.0MB. Free memory was 80.3MB in the beginning and 78.9MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-19 17:24:21,513 INFO L158 Benchmark]: RCFGBuilder took 432.72ms. Allocated memory is still 107.0MB. Free memory was 78.9MB in the beginning and 61.4MB in the end (delta: 17.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-07-19 17:24:21,514 INFO L158 Benchmark]: TraceAbstraction took 13187.70ms. Allocated memory was 107.0MB in the beginning and 188.7MB in the end (delta: 81.8MB). Free memory was 60.9MB in the beginning and 94.4MB in the end (delta: -33.5MB). Peak memory consumption was 94.6MB. Max. memory is 16.1GB. [2022-07-19 17:24:21,514 INFO L158 Benchmark]: Witness Printer took 84.83ms. Allocated memory is still 188.7MB. Free memory was 94.4MB in the beginning and 88.1MB in the end (delta: 6.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-19 17:24:21,516 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21ms. Allocated memory is still 88.1MB. Free memory is still 67.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 470.18ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 49.6MB in the beginning and 83.1MB in the end (delta: -33.5MB). Peak memory consumption was 24.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 54.60ms. Allocated memory is still 107.0MB. Free memory was 83.1MB in the beginning and 80.3MB in the end (delta: 2.8MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 24.60ms. Allocated memory is still 107.0MB. Free memory was 80.3MB in the beginning and 78.9MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 432.72ms. Allocated memory is still 107.0MB. Free memory was 78.9MB in the beginning and 61.4MB in the end (delta: 17.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 13187.70ms. Allocated memory was 107.0MB in the beginning and 188.7MB in the end (delta: 81.8MB). Free memory was 60.9MB in the beginning and 94.4MB in the end (delta: -33.5MB). Peak memory consumption was 94.6MB. Max. memory is 16.1GB. * Witness Printer took 84.83ms. Allocated memory is still 188.7MB. Free memory was 94.4MB in the beginning and 88.1MB in the end (delta: 6.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 100 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.1s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2239 SdHoareTripleChecker+Valid, 2.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2207 mSDsluCounter, 3898 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2285 mSDsCounter, 760 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2854 IncrementalHoareTripleChecker+Invalid, 3614 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 760 mSolverCounterUnsat, 1613 mSDtfsCounter, 2854 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 799 GetRequests, 652 SyntacticMatches, 6 SemanticMatches, 141 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 446 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1026occurred in iteration=8, InterpolantAutomatonStates: 113, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 13 MinimizatonAttempts, 368 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 2706 PreInvPairs, 3025 NumberOfFragments, 3389 HoareAnnotationTreeSize, 2706 FomulaSimplifications, 3024 FormulaSimplificationTreeSizeReduction, 0.9s HoareSimplificationTime, 46 FomulaSimplificationsInter, 20106 FormulaSimplificationTreeSizeReductionInter, 4.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 1198 NumberOfCodeBlocks, 1198 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1319 ConstructedInterpolants, 0 QuantifiedInterpolants, 2606 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1935 ConjunctsInSsa, 31 ConjunctsInUnsatCore, 18 InterpolantComputations, 12 PerfectInterpolantSequences, 400/453 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || (((\result == 0 && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1))) && tmp == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && tmp == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methAndRunningLastTime == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && tmp == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) || (((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && tmp == 0)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 472]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 304]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(\result == 0)) && 1 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && ((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(\result == 0)) && 1 == systemActive)) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) - InvariantResult [Line: 247]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) && (((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 157]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 191]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 528]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 535]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 313]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 314]: Loop Invariant Derived loop invariant: (((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 372]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 166]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || ((((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == 0) && 1 == systemActive) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) RESULT: Ultimate proved your program to be correct! [2022-07-19 17:24:21,580 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE