./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c4da108453cefa034e9e2f20ae1a945f7f6bf5ea54205b9ec625406680c7ecea --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-13 17:58:03,156 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-13 17:58:03,157 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-13 17:58:03,193 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-13 17:58:03,194 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-13 17:58:03,195 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-13 17:58:03,198 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-13 17:58:03,203 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-13 17:58:03,204 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-13 17:58:03,208 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-13 17:58:03,209 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-13 17:58:03,211 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-13 17:58:03,212 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-13 17:58:03,214 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-13 17:58:03,215 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-13 17:58:03,216 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-13 17:58:03,217 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-13 17:58:03,219 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-13 17:58:03,223 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-13 17:58:03,230 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-13 17:58:03,233 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-13 17:58:03,234 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-13 17:58:03,234 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-13 17:58:03,235 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-13 17:58:03,237 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-13 17:58:03,239 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-13 17:58:03,240 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-13 17:58:03,241 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-13 17:58:03,242 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-13 17:58:03,242 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-13 17:58:03,243 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-13 17:58:03,243 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-13 17:58:03,245 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-13 17:58:03,246 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-13 17:58:03,246 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-13 17:58:03,247 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-13 17:58:03,247 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-13 17:58:03,248 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-13 17:58:03,248 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-13 17:58:03,248 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-13 17:58:03,249 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-13 17:58:03,250 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-13 17:58:03,252 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-13 17:58:03,289 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-13 17:58:03,292 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-13 17:58:03,292 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-13 17:58:03,292 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-13 17:58:03,293 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-13 17:58:03,294 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-13 17:58:03,294 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-13 17:58:03,294 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-13 17:58:03,295 INFO L138 SettingsManager]: * Use SBE=true [2022-07-13 17:58:03,296 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-13 17:58:03,296 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-13 17:58:03,296 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-13 17:58:03,296 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-13 17:58:03,296 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-13 17:58:03,296 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-13 17:58:03,297 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-13 17:58:03,297 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-13 17:58:03,297 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-13 17:58:03,297 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-13 17:58:03,299 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-13 17:58:03,299 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-13 17:58:03,299 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-13 17:58:03,300 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-13 17:58:03,300 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-13 17:58:03,300 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:58:03,301 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-13 17:58:03,301 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-13 17:58:03,301 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-13 17:58:03,301 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-13 17:58:03,301 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-13 17:58:03,302 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-13 17:58:03,302 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-13 17:58:03,302 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-13 17:58:03,302 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c4da108453cefa034e9e2f20ae1a945f7f6bf5ea54205b9ec625406680c7ecea [2022-07-13 17:58:03,567 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-13 17:58:03,590 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-13 17:58:03,593 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-13 17:58:03,595 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-13 17:58:03,595 INFO L275 PluginConnector]: CDTParser initialized [2022-07-13 17:58:03,597 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c [2022-07-13 17:58:03,648 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/349362c22/7ea30f028aa744f0a91be817bae667a7/FLAG7e327f6ab [2022-07-13 17:58:04,103 INFO L306 CDTParser]: Found 1 translation units. [2022-07-13 17:58:04,104 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c [2022-07-13 17:58:04,119 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/349362c22/7ea30f028aa744f0a91be817bae667a7/FLAG7e327f6ab [2022-07-13 17:58:04,616 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/349362c22/7ea30f028aa744f0a91be817bae667a7 [2022-07-13 17:58:04,620 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-13 17:58:04,621 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-13 17:58:04,622 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-13 17:58:04,623 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-13 17:58:04,625 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-13 17:58:04,625 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:58:04" (1/1) ... [2022-07-13 17:58:04,626 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@423d1805 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:04, skipping insertion in model container [2022-07-13 17:58:04,626 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:58:04" (1/1) ... [2022-07-13 17:58:04,641 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-13 17:58:04,706 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-13 17:58:04,819 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c[2044,2057] [2022-07-13 17:58:04,952 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:58:04,971 INFO L203 MainTranslator]: Completed pre-run [2022-07-13 17:58:04,994 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c[2044,2057] [2022-07-13 17:58:05,044 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:58:05,058 INFO L208 MainTranslator]: Completed translation [2022-07-13 17:58:05,058 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:05 WrapperNode [2022-07-13 17:58:05,059 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-13 17:58:05,059 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-13 17:58:05,060 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-13 17:58:05,060 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-13 17:58:05,066 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:05" (1/1) ... [2022-07-13 17:58:05,085 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:05" (1/1) ... [2022-07-13 17:58:05,129 INFO L137 Inliner]: procedures = 55, calls = 157, calls flagged for inlining = 21, calls inlined = 18, statements flattened = 241 [2022-07-13 17:58:05,133 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-13 17:58:05,133 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-13 17:58:05,134 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-13 17:58:05,134 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-13 17:58:05,141 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:05" (1/1) ... [2022-07-13 17:58:05,141 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:05" (1/1) ... [2022-07-13 17:58:05,149 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:05" (1/1) ... [2022-07-13 17:58:05,149 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:05" (1/1) ... [2022-07-13 17:58:05,157 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:05" (1/1) ... [2022-07-13 17:58:05,164 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:05" (1/1) ... [2022-07-13 17:58:05,165 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:05" (1/1) ... [2022-07-13 17:58:05,167 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-13 17:58:05,168 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-13 17:58:05,168 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-13 17:58:05,168 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-13 17:58:05,169 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:05" (1/1) ... [2022-07-13 17:58:05,180 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:58:05,189 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:05,204 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-13 17:58:05,206 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-13 17:58:05,230 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-13 17:58:05,231 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-13 17:58:05,231 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-13 17:58:05,231 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-13 17:58:05,231 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-13 17:58:05,231 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-13 17:58:05,232 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-13 17:58:05,232 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-13 17:58:05,232 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-13 17:58:05,232 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-13 17:58:05,232 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-13 17:58:05,232 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-13 17:58:05,233 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-13 17:58:05,233 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-13 17:58:05,233 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-13 17:58:05,233 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-13 17:58:05,233 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-13 17:58:05,233 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-13 17:58:05,234 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-13 17:58:05,234 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-13 17:58:05,234 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-13 17:58:05,234 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-13 17:58:05,308 INFO L234 CfgBuilder]: Building ICFG [2022-07-13 17:58:05,310 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-13 17:58:05,591 INFO L275 CfgBuilder]: Performing block encoding [2022-07-13 17:58:05,598 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-13 17:58:05,598 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-13 17:58:05,600 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:05 BoogieIcfgContainer [2022-07-13 17:58:05,600 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-13 17:58:05,601 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-13 17:58:05,602 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-13 17:58:05,606 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-13 17:58:05,606 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.07 05:58:04" (1/3) ... [2022-07-13 17:58:05,607 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5b822b56 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:58:05, skipping insertion in model container [2022-07-13 17:58:05,607 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:05" (2/3) ... [2022-07-13 17:58:05,608 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5b822b56 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:58:05, skipping insertion in model container [2022-07-13 17:58:05,608 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:05" (3/3) ... [2022-07-13 17:58:05,609 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product47.cil.c [2022-07-13 17:58:05,619 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-13 17:58:05,619 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-13 17:58:05,658 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-13 17:58:05,664 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@1c414dce, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@1b537049 [2022-07-13 17:58:05,665 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-13 17:58:05,672 INFO L276 IsEmpty]: Start isEmpty. Operand has 100 states, 73 states have (on average 1.36986301369863) internal successors, (100), 82 states have internal predecessors, (100), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2022-07-13 17:58:05,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-07-13 17:58:05,685 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:05,686 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:05,687 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:05,691 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:05,691 INFO L85 PathProgramCache]: Analyzing trace with hash -707310338, now seen corresponding path program 1 times [2022-07-13 17:58:05,697 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:05,697 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1086113845] [2022-07-13 17:58:05,698 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:05,698 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:05,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:05,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-13 17:58:05,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:05,942 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:05,943 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:05,944 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1086113845] [2022-07-13 17:58:05,945 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1086113845] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:05,945 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:05,945 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-13 17:58:05,947 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [952725177] [2022-07-13 17:58:05,948 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:05,952 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-13 17:58:05,953 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:05,987 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-13 17:58:05,989 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:58:05,993 INFO L87 Difference]: Start difference. First operand has 100 states, 73 states have (on average 1.36986301369863) internal successors, (100), 82 states have internal predecessors, (100), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:06,040 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:06,040 INFO L93 Difference]: Finished difference Result 192 states and 259 transitions. [2022-07-13 17:58:06,041 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-13 17:58:06,042 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-07-13 17:58:06,042 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:06,050 INFO L225 Difference]: With dead ends: 192 [2022-07-13 17:58:06,051 INFO L226 Difference]: Without dead ends: 91 [2022-07-13 17:58:06,054 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:58:06,057 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:06,059 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:06,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-07-13 17:58:06,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2022-07-13 17:58:06,117 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-13 17:58:06,124 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 117 transitions. [2022-07-13 17:58:06,126 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 117 transitions. Word has length 23 [2022-07-13 17:58:06,126 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:06,126 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 117 transitions. [2022-07-13 17:58:06,126 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:06,127 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 117 transitions. [2022-07-13 17:58:06,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-07-13 17:58:06,128 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:06,128 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:06,129 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-13 17:58:06,129 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:06,130 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:06,130 INFO L85 PathProgramCache]: Analyzing trace with hash 624156156, now seen corresponding path program 1 times [2022-07-13 17:58:06,130 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:06,130 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [258486380] [2022-07-13 17:58:06,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:06,130 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:06,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:06,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 17:58:06,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:06,189 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:06,190 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:06,190 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [258486380] [2022-07-13 17:58:06,190 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [258486380] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:06,190 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:06,190 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 17:58:06,191 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1827745862] [2022-07-13 17:58:06,191 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:06,192 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:58:06,192 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:06,193 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:58:06,193 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:06,193 INFO L87 Difference]: Start difference. First operand 91 states and 117 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:06,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:06,207 INFO L93 Difference]: Finished difference Result 144 states and 184 transitions. [2022-07-13 17:58:06,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:58:06,207 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-07-13 17:58:06,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:06,209 INFO L225 Difference]: With dead ends: 144 [2022-07-13 17:58:06,209 INFO L226 Difference]: Without dead ends: 82 [2022-07-13 17:58:06,210 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:06,211 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 16 mSDsluCounter, 83 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:06,211 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 187 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:06,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-07-13 17:58:06,219 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2022-07-13 17:58:06,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 68 states have internal predecessors, (79), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-13 17:58:06,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 105 transitions. [2022-07-13 17:58:06,221 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 105 transitions. Word has length 24 [2022-07-13 17:58:06,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:06,221 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 105 transitions. [2022-07-13 17:58:06,221 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:06,222 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 105 transitions. [2022-07-13 17:58:06,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-07-13 17:58:06,223 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:06,223 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:06,223 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-13 17:58:06,223 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:06,224 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:06,224 INFO L85 PathProgramCache]: Analyzing trace with hash -1800989914, now seen corresponding path program 1 times [2022-07-13 17:58:06,224 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:06,225 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [960013103] [2022-07-13 17:58:06,225 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:06,225 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:06,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:06,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 17:58:06,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:06,305 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:06,305 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:06,306 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [960013103] [2022-07-13 17:58:06,306 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [960013103] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:06,307 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:06,307 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 17:58:06,308 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1540218798] [2022-07-13 17:58:06,308 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:06,309 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:58:06,309 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:06,310 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:58:06,310 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:06,311 INFO L87 Difference]: Start difference. First operand 82 states and 105 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:06,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:06,350 INFO L93 Difference]: Finished difference Result 231 states and 301 transitions. [2022-07-13 17:58:06,351 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:58:06,351 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2022-07-13 17:58:06,351 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:06,357 INFO L225 Difference]: With dead ends: 231 [2022-07-13 17:58:06,357 INFO L226 Difference]: Without dead ends: 156 [2022-07-13 17:58:06,361 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:06,365 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 85 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:06,367 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 228 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:06,369 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2022-07-13 17:58:06,396 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 153. [2022-07-13 17:58:06,399 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153 states, 110 states have (on average 1.3363636363636364) internal successors, (147), 125 states have internal predecessors, (147), 26 states have call successors, (26), 16 states have call predecessors, (26), 16 states have return successors, (26), 19 states have call predecessors, (26), 26 states have call successors, (26) [2022-07-13 17:58:06,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153 states to 153 states and 199 transitions. [2022-07-13 17:58:06,404 INFO L78 Accepts]: Start accepts. Automaton has 153 states and 199 transitions. Word has length 28 [2022-07-13 17:58:06,404 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:06,405 INFO L495 AbstractCegarLoop]: Abstraction has 153 states and 199 transitions. [2022-07-13 17:58:06,405 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:06,405 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 199 transitions. [2022-07-13 17:58:06,406 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-13 17:58:06,408 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:06,408 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:06,409 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-13 17:58:06,409 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:06,410 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:06,410 INFO L85 PathProgramCache]: Analyzing trace with hash -40246052, now seen corresponding path program 1 times [2022-07-13 17:58:06,410 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:06,412 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [438217443] [2022-07-13 17:58:06,412 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:06,412 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:06,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:06,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-13 17:58:06,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:06,500 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:06,500 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:06,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [438217443] [2022-07-13 17:58:06,501 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [438217443] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:06,501 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:06,501 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:06,501 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2012426356] [2022-07-13 17:58:06,502 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:06,502 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:06,503 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:06,503 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:06,503 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:06,504 INFO L87 Difference]: Start difference. First operand 153 states and 199 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:06,658 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:06,658 INFO L93 Difference]: Finished difference Result 445 states and 588 transitions. [2022-07-13 17:58:06,658 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:58:06,659 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-07-13 17:58:06,659 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:06,666 INFO L225 Difference]: With dead ends: 445 [2022-07-13 17:58:06,667 INFO L226 Difference]: Without dead ends: 299 [2022-07-13 17:58:06,668 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-07-13 17:58:06,675 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 76 mSDsluCounter, 403 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 518 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:06,676 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 518 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:06,679 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2022-07-13 17:58:06,701 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 293. [2022-07-13 17:58:06,702 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 293 states, 208 states have (on average 1.3269230769230769) internal successors, (276), 237 states have internal predecessors, (276), 52 states have call successors, (52), 32 states have call predecessors, (52), 32 states have return successors, (54), 38 states have call predecessors, (54), 52 states have call successors, (54) [2022-07-13 17:58:06,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 293 states to 293 states and 382 transitions. [2022-07-13 17:58:06,706 INFO L78 Accepts]: Start accepts. Automaton has 293 states and 382 transitions. Word has length 32 [2022-07-13 17:58:06,706 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:06,706 INFO L495 AbstractCegarLoop]: Abstraction has 293 states and 382 transitions. [2022-07-13 17:58:06,707 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:06,707 INFO L276 IsEmpty]: Start isEmpty. Operand 293 states and 382 transitions. [2022-07-13 17:58:06,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-07-13 17:58:06,712 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:06,712 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:06,712 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-13 17:58:06,713 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:06,713 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:06,713 INFO L85 PathProgramCache]: Analyzing trace with hash 1430200224, now seen corresponding path program 1 times [2022-07-13 17:58:06,714 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:06,714 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1492208753] [2022-07-13 17:58:06,714 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:06,714 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:06,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:06,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-13 17:58:06,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:06,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-13 17:58:06,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:06,824 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:06,826 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:06,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1492208753] [2022-07-13 17:58:06,827 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1492208753] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:06,827 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:06,828 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:06,828 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [233909494] [2022-07-13 17:58:06,828 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:06,828 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:06,829 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:06,834 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:06,834 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:06,835 INFO L87 Difference]: Start difference. First operand 293 states and 382 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 17:58:07,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:07,126 INFO L93 Difference]: Finished difference Result 775 states and 1023 transitions. [2022-07-13 17:58:07,126 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:58:07,126 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 36 [2022-07-13 17:58:07,127 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:07,131 INFO L225 Difference]: With dead ends: 775 [2022-07-13 17:58:07,131 INFO L226 Difference]: Without dead ends: 489 [2022-07-13 17:58:07,133 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-13 17:58:07,134 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 128 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 264 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 199 SdHoareTripleChecker+Invalid, 313 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 264 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:07,134 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [135 Valid, 199 Invalid, 313 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 264 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:58:07,136 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 489 states. [2022-07-13 17:58:07,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 489 to 475. [2022-07-13 17:58:07,190 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 475 states, 342 states have (on average 1.2748538011695907) internal successors, (436), 375 states have internal predecessors, (436), 72 states have call successors, (72), 60 states have call predecessors, (72), 60 states have return successors, (92), 66 states have call predecessors, (92), 72 states have call successors, (92) [2022-07-13 17:58:07,192 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 475 states to 475 states and 600 transitions. [2022-07-13 17:58:07,193 INFO L78 Accepts]: Start accepts. Automaton has 475 states and 600 transitions. Word has length 36 [2022-07-13 17:58:07,193 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:07,193 INFO L495 AbstractCegarLoop]: Abstraction has 475 states and 600 transitions. [2022-07-13 17:58:07,193 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 17:58:07,193 INFO L276 IsEmpty]: Start isEmpty. Operand 475 states and 600 transitions. [2022-07-13 17:58:07,196 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-07-13 17:58:07,196 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:07,196 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:07,197 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-13 17:58:07,197 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:07,197 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:07,198 INFO L85 PathProgramCache]: Analyzing trace with hash -1476072605, now seen corresponding path program 1 times [2022-07-13 17:58:07,198 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:07,198 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [292649558] [2022-07-13 17:58:07,198 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:07,198 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:07,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:07,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-13 17:58:07,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:07,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-13 17:58:07,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:07,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:07,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:07,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:58:07,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:07,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-13 17:58:07,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:07,305 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:58:07,305 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:07,305 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [292649558] [2022-07-13 17:58:07,305 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [292649558] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:07,305 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:07,306 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 17:58:07,306 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [184277353] [2022-07-13 17:58:07,306 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:07,306 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 17:58:07,306 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:07,307 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 17:58:07,307 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:58:07,307 INFO L87 Difference]: Start difference. First operand 475 states and 600 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-13 17:58:07,743 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:07,743 INFO L93 Difference]: Finished difference Result 1097 states and 1418 transitions. [2022-07-13 17:58:07,744 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-07-13 17:58:07,744 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 58 [2022-07-13 17:58:07,745 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:07,749 INFO L225 Difference]: With dead ends: 1097 [2022-07-13 17:58:07,750 INFO L226 Difference]: Without dead ends: 629 [2022-07-13 17:58:07,752 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=86, Invalid=186, Unknown=0, NotChecked=0, Total=272 [2022-07-13 17:58:07,752 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 366 mSDsluCounter, 120 mSDsCounter, 0 mSdLazyCounter, 415 mSolverCounterSat, 154 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 370 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 569 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 154 IncrementalHoareTripleChecker+Valid, 415 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:07,753 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [370 Valid, 233 Invalid, 569 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [154 Valid, 415 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-13 17:58:07,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 629 states. [2022-07-13 17:58:07,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 629 to 563. [2022-07-13 17:58:07,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 563 states, 410 states have (on average 1.2439024390243902) internal successors, (510), 443 states have internal predecessors, (510), 80 states have call successors, (80), 60 states have call predecessors, (80), 72 states have return successors, (112), 82 states have call predecessors, (112), 80 states have call successors, (112) [2022-07-13 17:58:07,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 563 states to 563 states and 702 transitions. [2022-07-13 17:58:07,810 INFO L78 Accepts]: Start accepts. Automaton has 563 states and 702 transitions. Word has length 58 [2022-07-13 17:58:07,811 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:07,811 INFO L495 AbstractCegarLoop]: Abstraction has 563 states and 702 transitions. [2022-07-13 17:58:07,811 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-13 17:58:07,811 INFO L276 IsEmpty]: Start isEmpty. Operand 563 states and 702 transitions. [2022-07-13 17:58:07,813 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-07-13 17:58:07,813 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:07,814 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:07,814 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-13 17:58:07,814 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:07,814 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:07,815 INFO L85 PathProgramCache]: Analyzing trace with hash -1498704859, now seen corresponding path program 1 times [2022-07-13 17:58:07,815 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:07,815 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [701772097] [2022-07-13 17:58:07,815 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:07,815 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:07,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:07,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-13 17:58:07,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:07,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-13 17:58:07,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:07,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:07,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:07,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:58:07,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:07,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-13 17:58:07,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:07,912 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:58:07,912 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:07,912 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [701772097] [2022-07-13 17:58:07,912 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [701772097] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:07,913 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:07,913 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 17:58:07,913 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [793770331] [2022-07-13 17:58:07,913 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:07,914 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 17:58:07,914 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:07,915 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 17:58:07,915 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:58:07,915 INFO L87 Difference]: Start difference. First operand 563 states and 702 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-13 17:58:08,172 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:08,173 INFO L93 Difference]: Finished difference Result 1153 states and 1478 transitions. [2022-07-13 17:58:08,173 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 17:58:08,173 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2022-07-13 17:58:08,174 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:08,177 INFO L225 Difference]: With dead ends: 1153 [2022-07-13 17:58:08,178 INFO L226 Difference]: Without dead ends: 597 [2022-07-13 17:58:08,182 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-13 17:58:08,183 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 129 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 305 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 363 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 305 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:08,183 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 214 Invalid, 363 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 305 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:58:08,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 597 states. [2022-07-13 17:58:08,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 597 to 575. [2022-07-13 17:58:08,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 575 states, 422 states have (on average 1.2369668246445498) internal successors, (522), 455 states have internal predecessors, (522), 80 states have call successors, (80), 60 states have call predecessors, (80), 72 states have return successors, (112), 82 states have call predecessors, (112), 80 states have call successors, (112) [2022-07-13 17:58:08,215 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 575 states to 575 states and 714 transitions. [2022-07-13 17:58:08,216 INFO L78 Accepts]: Start accepts. Automaton has 575 states and 714 transitions. Word has length 58 [2022-07-13 17:58:08,216 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:08,217 INFO L495 AbstractCegarLoop]: Abstraction has 575 states and 714 transitions. [2022-07-13 17:58:08,217 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-13 17:58:08,218 INFO L276 IsEmpty]: Start isEmpty. Operand 575 states and 714 transitions. [2022-07-13 17:58:08,220 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-07-13 17:58:08,220 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:08,220 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:08,220 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-13 17:58:08,221 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:08,221 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:08,221 INFO L85 PathProgramCache]: Analyzing trace with hash -1201312991, now seen corresponding path program 1 times [2022-07-13 17:58:08,221 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:08,221 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [502207711] [2022-07-13 17:58:08,222 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:08,222 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:08,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-13 17:58:08,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-13 17:58:08,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:08,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:58:08,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-13 17:58:08,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,320 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:58:08,320 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:08,320 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [502207711] [2022-07-13 17:58:08,323 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [502207711] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:08,323 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:08,323 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:08,323 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [42127138] [2022-07-13 17:58:08,323 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:08,324 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:08,324 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:08,324 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:08,324 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:08,325 INFO L87 Difference]: Start difference. First operand 575 states and 714 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-13 17:58:08,661 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:08,661 INFO L93 Difference]: Finished difference Result 1629 states and 2110 transitions. [2022-07-13 17:58:08,662 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-13 17:58:08,662 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 58 [2022-07-13 17:58:08,662 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:08,668 INFO L225 Difference]: With dead ends: 1629 [2022-07-13 17:58:08,668 INFO L226 Difference]: Without dead ends: 1061 [2022-07-13 17:58:08,670 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-13 17:58:08,671 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 334 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 277 mSolverCounterSat, 142 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 337 SdHoareTripleChecker+Valid, 250 SdHoareTripleChecker+Invalid, 419 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 142 IncrementalHoareTripleChecker+Valid, 277 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:08,671 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [337 Valid, 250 Invalid, 419 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [142 Valid, 277 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-13 17:58:08,672 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1061 states. [2022-07-13 17:58:08,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1061 to 1049. [2022-07-13 17:58:08,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1049 states, 776 states have (on average 1.2164948453608246) internal successors, (944), 827 states have internal predecessors, (944), 142 states have call successors, (142), 126 states have call predecessors, (142), 130 states have return successors, (228), 140 states have call predecessors, (228), 142 states have call successors, (228) [2022-07-13 17:58:08,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1049 states to 1049 states and 1314 transitions. [2022-07-13 17:58:08,738 INFO L78 Accepts]: Start accepts. Automaton has 1049 states and 1314 transitions. Word has length 58 [2022-07-13 17:58:08,740 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:08,740 INFO L495 AbstractCegarLoop]: Abstraction has 1049 states and 1314 transitions. [2022-07-13 17:58:08,740 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-07-13 17:58:08,740 INFO L276 IsEmpty]: Start isEmpty. Operand 1049 states and 1314 transitions. [2022-07-13 17:58:08,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-07-13 17:58:08,742 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:08,742 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:08,742 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-13 17:58:08,743 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:08,743 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:08,743 INFO L85 PathProgramCache]: Analyzing trace with hash -238505913, now seen corresponding path program 1 times [2022-07-13 17:58:08,744 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:08,744 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1006956626] [2022-07-13 17:58:08,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:08,744 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:08,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:58:08,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-13 17:58:08,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-13 17:58:08,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:08,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:58:08,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2022-07-13 17:58:08,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,888 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-13 17:58:08,888 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:08,888 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1006956626] [2022-07-13 17:58:08,889 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1006956626] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:58:08,889 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [529895133] [2022-07-13 17:58:08,889 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:08,889 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:08,889 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:08,895 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:58:08,922 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-13 17:58:08,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:08,989 INFO L263 TraceCheckSpWp]: Trace formula consists of 382 conjuncts, 9 conjunts are in the unsatisfiable core [2022-07-13 17:58:08,997 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:58:09,278 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:09,278 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 17:58:09,278 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [529895133] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:09,278 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 17:58:09,278 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2022-07-13 17:58:09,279 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2055136514] [2022-07-13 17:58:09,279 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:09,279 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-13 17:58:09,279 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:09,279 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-13 17:58:09,280 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2022-07-13 17:58:09,280 INFO L87 Difference]: Start difference. First operand 1049 states and 1314 transitions. Second operand has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-07-13 17:58:09,448 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:09,448 INFO L93 Difference]: Finished difference Result 2049 states and 2579 transitions. [2022-07-13 17:58:09,448 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:58:09,449 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 62 [2022-07-13 17:58:09,449 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:09,453 INFO L225 Difference]: With dead ends: 2049 [2022-07-13 17:58:09,453 INFO L226 Difference]: Without dead ends: 1007 [2022-07-13 17:58:09,456 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2022-07-13 17:58:09,457 INFO L413 NwaCegarLoop]: 191 mSDtfsCounter, 71 mSDsluCounter, 510 mSDsCounter, 0 mSdLazyCounter, 172 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 701 SdHoareTripleChecker+Invalid, 175 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 172 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:09,457 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 701 Invalid, 175 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 172 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:09,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1007 states. [2022-07-13 17:58:09,496 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1007 to 1003. [2022-07-13 17:58:09,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1003 states, 740 states have (on average 1.2027027027027026) internal successors, (890), 789 states have internal predecessors, (890), 138 states have call successors, (138), 122 states have call predecessors, (138), 124 states have return successors, (200), 134 states have call predecessors, (200), 138 states have call successors, (200) [2022-07-13 17:58:09,502 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1003 states to 1003 states and 1228 transitions. [2022-07-13 17:58:09,503 INFO L78 Accepts]: Start accepts. Automaton has 1003 states and 1228 transitions. Word has length 62 [2022-07-13 17:58:09,503 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:09,503 INFO L495 AbstractCegarLoop]: Abstraction has 1003 states and 1228 transitions. [2022-07-13 17:58:09,503 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-07-13 17:58:09,503 INFO L276 IsEmpty]: Start isEmpty. Operand 1003 states and 1228 transitions. [2022-07-13 17:58:09,506 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-07-13 17:58:09,506 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:09,506 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:09,530 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-07-13 17:58:09,725 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:09,725 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:09,726 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:09,726 INFO L85 PathProgramCache]: Analyzing trace with hash -353852961, now seen corresponding path program 1 times [2022-07-13 17:58:09,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:09,726 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [955756520] [2022-07-13 17:58:09,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:09,726 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:09,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:09,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:58:09,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:09,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-13 17:58:09,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:09,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 17:58:09,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:09,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:09,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:09,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:58:09,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:09,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-13 17:58:09,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:09,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-07-13 17:58:09,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:09,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-07-13 17:58:09,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:09,818 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-13 17:58:09,818 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:09,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [955756520] [2022-07-13 17:58:09,819 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [955756520] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:09,819 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:09,819 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-13 17:58:09,819 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [911025662] [2022-07-13 17:58:09,819 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:09,820 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-13 17:58:09,820 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:09,820 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-13 17:58:09,821 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-07-13 17:58:09,821 INFO L87 Difference]: Start difference. First operand 1003 states and 1228 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2022-07-13 17:58:10,196 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:10,197 INFO L93 Difference]: Finished difference Result 1335 states and 1642 transitions. [2022-07-13 17:58:10,197 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-13 17:58:10,197 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 89 [2022-07-13 17:58:10,197 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:10,218 INFO L225 Difference]: With dead ends: 1335 [2022-07-13 17:58:10,219 INFO L226 Difference]: Without dead ends: 592 [2022-07-13 17:58:10,220 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2022-07-13 17:58:10,221 INFO L413 NwaCegarLoop]: 123 mSDtfsCounter, 294 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 328 mSolverCounterSat, 127 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 304 SdHoareTripleChecker+Valid, 305 SdHoareTripleChecker+Invalid, 455 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 127 IncrementalHoareTripleChecker+Valid, 328 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:10,221 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [304 Valid, 305 Invalid, 455 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [127 Valid, 328 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-13 17:58:10,222 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2022-07-13 17:58:10,246 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 572. [2022-07-13 17:58:10,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 572 states, 420 states have (on average 1.1571428571428573) internal successors, (486), 450 states have internal predecessors, (486), 81 states have call successors, (81), 60 states have call predecessors, (81), 70 states have return successors, (128), 81 states have call predecessors, (128), 81 states have call successors, (128) [2022-07-13 17:58:10,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 572 states to 572 states and 695 transitions. [2022-07-13 17:58:10,250 INFO L78 Accepts]: Start accepts. Automaton has 572 states and 695 transitions. Word has length 89 [2022-07-13 17:58:10,250 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:10,250 INFO L495 AbstractCegarLoop]: Abstraction has 572 states and 695 transitions. [2022-07-13 17:58:10,250 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2022-07-13 17:58:10,250 INFO L276 IsEmpty]: Start isEmpty. Operand 572 states and 695 transitions. [2022-07-13 17:58:10,252 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2022-07-13 17:58:10,252 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:10,252 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:10,252 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-13 17:58:10,252 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:10,253 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:10,253 INFO L85 PathProgramCache]: Analyzing trace with hash -753408287, now seen corresponding path program 1 times [2022-07-13 17:58:10,253 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:10,253 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [999779262] [2022-07-13 17:58:10,253 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:10,253 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:10,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:58:10,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 17:58:10,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 17:58:10,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:10,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:58:10,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-07-13 17:58:10,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-07-13 17:58:10,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-07-13 17:58:10,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:58:10,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-07-13 17:58:10,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:10,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2022-07-13 17:58:10,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,425 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-07-13 17:58:10,425 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:10,426 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [999779262] [2022-07-13 17:58:10,426 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [999779262] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:58:10,426 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1339602465] [2022-07-13 17:58:10,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:10,426 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:10,426 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:10,428 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:58:10,429 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-13 17:58:10,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:10,530 INFO L263 TraceCheckSpWp]: Trace formula consists of 481 conjuncts, 9 conjunts are in the unsatisfiable core [2022-07-13 17:58:10,536 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:58:10,651 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-13 17:58:10,651 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 17:58:10,651 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1339602465] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:10,651 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 17:58:10,651 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2022-07-13 17:58:10,651 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [60972586] [2022-07-13 17:58:10,652 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:10,652 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-13 17:58:10,652 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:10,653 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-13 17:58:10,653 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-07-13 17:58:10,653 INFO L87 Difference]: Start difference. First operand 572 states and 695 transitions. Second operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-07-13 17:58:10,776 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:10,776 INFO L93 Difference]: Finished difference Result 1000 states and 1235 transitions. [2022-07-13 17:58:10,777 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:58:10,777 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 106 [2022-07-13 17:58:10,777 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:10,778 INFO L225 Difference]: With dead ends: 1000 [2022-07-13 17:58:10,778 INFO L226 Difference]: Without dead ends: 0 [2022-07-13 17:58:10,780 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2022-07-13 17:58:10,781 INFO L413 NwaCegarLoop]: 174 mSDtfsCounter, 68 mSDsluCounter, 864 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 1038 SdHoareTripleChecker+Invalid, 126 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:10,781 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 1038 Invalid, 126 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:10,782 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-13 17:58:10,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-13 17:58:10,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 17:58:10,782 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-13 17:58:10,782 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 106 [2022-07-13 17:58:10,783 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:10,783 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 17:58:10,783 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-07-13 17:58:10,783 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-13 17:58:10,783 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-13 17:58:10,785 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-13 17:58:10,811 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-07-13 17:58:11,009 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-13 17:58:11,012 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-13 17:58:14,528 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 342 349) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse4) (or .cse0 .cse3 .cse2 .cse5))) [2022-07-13 17:58:14,528 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 342 349) no Hoare annotation was computed. [2022-07-13 17:58:14,529 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 342 349) no Hoare annotation was computed. [2022-07-13 17:58:14,529 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 258 264) no Hoare annotation was computed. [2022-07-13 17:58:14,529 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 258 264) the Hoare annotation is: true [2022-07-13 17:58:14,529 INFO L899 garLoopResultBuilder]: For program point L162-1(lines 158 169) no Hoare annotation was computed. [2022-07-13 17:58:14,529 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 158 169) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse5 (not (<= 1 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse3 .cse2 .cse5 .cse4) (or .cse3 .cse1 .cse2 .cse5))) [2022-07-13 17:58:14,529 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 158 169) no Hoare annotation was computed. [2022-07-13 17:58:14,529 INFO L899 garLoopResultBuilder]: For program point L897(line 897) no Hoare annotation was computed. [2022-07-13 17:58:14,529 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 876 905) no Hoare annotation was computed. [2022-07-13 17:58:14,529 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 876 905) the Hoare annotation is: true [2022-07-13 17:58:14,529 INFO L899 garLoopResultBuilder]: For program point L890(lines 890 894) no Hoare annotation was computed. [2022-07-13 17:58:14,529 INFO L902 garLoopResultBuilder]: At program point L890-1(lines 890 894) the Hoare annotation is: true [2022-07-13 17:58:14,529 INFO L899 garLoopResultBuilder]: For program point L887(line 887) no Hoare annotation was computed. [2022-07-13 17:58:14,529 INFO L902 garLoopResultBuilder]: At program point L886-2(lines 886 900) the Hoare annotation is: true [2022-07-13 17:58:14,529 INFO L902 garLoopResultBuilder]: At program point L882(line 882) the Hoare annotation is: true [2022-07-13 17:58:14,530 INFO L899 garLoopResultBuilder]: For program point L882-1(line 882) no Hoare annotation was computed. [2022-07-13 17:58:14,530 INFO L902 garLoopResultBuilder]: At program point L901(lines 876 905) the Hoare annotation is: true [2022-07-13 17:58:14,530 INFO L895 garLoopResultBuilder]: At program point L366(lines 361 369) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= 0 ~systemActive~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 (and .cse4 .cse5 .cse3) .cse6) (or .cse1 (and .cse4 .cse5) .cse2) (or .cse0 .cse7 .cse6) (or .cse1 .cse7))) [2022-07-13 17:58:14,530 INFO L899 garLoopResultBuilder]: For program point L238-1(lines 237 256) no Hoare annotation was computed. [2022-07-13 17:58:14,530 INFO L899 garLoopResultBuilder]: For program point L300(lines 300 308) no Hoare annotation was computed. [2022-07-13 17:58:14,530 INFO L899 garLoopResultBuilder]: For program point L296(lines 296 313) no Hoare annotation was computed. [2022-07-13 17:58:14,530 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 234 257) no Hoare annotation was computed. [2022-07-13 17:58:14,531 INFO L899 garLoopResultBuilder]: For program point L65(lines 65 71) no Hoare annotation was computed. [2022-07-13 17:58:14,531 INFO L899 garLoopResultBuilder]: For program point L61(lines 61 74) no Hoare annotation was computed. [2022-07-13 17:58:14,532 INFO L895 garLoopResultBuilder]: At program point L61-1(lines 53 77) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= 0 ~systemActive~0)))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4) (or .cse0 .cse5 .cse3 .cse2) (or .cse1 .cse5 .cse3) (or .cse5 (and .cse6 (<= 2 ~waterLevel~0)) (and .cse1 .cse6) .cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6)) (or .cse0 .cse5 .cse7 .cse2) (or (and .cse1 .cse6 .cse2) .cse0 .cse7 .cse4))) [2022-07-13 17:58:14,532 INFO L899 garLoopResultBuilder]: For program point L83(line 83) no Hoare annotation was computed. [2022-07-13 17:58:14,533 INFO L895 garLoopResultBuilder]: At program point L306(line 306) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse0 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse2 .cse4) (or .cse3 .cse0 .cse1))) [2022-07-13 17:58:14,533 INFO L895 garLoopResultBuilder]: At program point L302(line 302) the Hoare annotation is: (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse2 .cse4) (or .cse3 .cse5 .cse4) (or .cse3 .cse1 .cse5) (or .cse3 .cse1 .cse2) (or .cse1 .cse5 (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~2#1|))))) [2022-07-13 17:58:14,533 INFO L895 garLoopResultBuilder]: At program point L298(line 298) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (= 0 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse3) (or .cse4 .cse2 .cse5) (or .cse4 .cse3 .cse5) (or .cse4 .cse1 .cse3) (or .cse4 .cse1 .cse2))) [2022-07-13 17:58:14,533 INFO L899 garLoopResultBuilder]: For program point L298-1(line 298) no Hoare annotation was computed. [2022-07-13 17:58:14,533 INFO L895 garLoopResultBuilder]: At program point L59(line 59) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (and .cse7 .cse6)) (.cse3 (not (= 0 ~systemActive~0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse0 .cse5 .cse2 .cse6) (or .cse7 .cse5 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse5 (<= 2 ~waterLevel~0) .cse4) (or .cse0 .cse5 .cse4 .cse6)))) [2022-07-13 17:58:14,533 INFO L899 garLoopResultBuilder]: For program point L59-1(line 59) no Hoare annotation was computed. [2022-07-13 17:58:14,534 INFO L895 garLoopResultBuilder]: At program point L311(line 311) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse5 .cse4) (or .cse0 .cse5 .cse2))) [2022-07-13 17:58:14,534 INFO L895 garLoopResultBuilder]: At program point L311-1(lines 292 316) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= 0 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2) (or .cse0 .cse5 .cse6) (or .cse0 .cse2 .cse6) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse1 (<= 2 ~waterLevel~0) .cse5) (or .cse0 .cse1 .cse5 .cse3))) [2022-07-13 17:58:14,534 INFO L899 garLoopResultBuilder]: For program point L245-1(lines 245 251) no Hoare annotation was computed. [2022-07-13 17:58:14,534 INFO L895 garLoopResultBuilder]: At program point L84(lines 79 86) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse2 .cse1 .cse4) (or .cse0 .cse3))) [2022-07-13 17:58:14,534 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 234 257) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse7)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse4 .cse6) (or .cse5 .cse2 .cse6)))) [2022-07-13 17:58:14,534 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 234 257) no Hoare annotation was computed. [2022-07-13 17:58:14,535 INFO L899 garLoopResultBuilder]: For program point L138(lines 138 142) no Hoare annotation was computed. [2022-07-13 17:58:14,535 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 83) no Hoare annotation was computed. [2022-07-13 17:58:14,535 INFO L895 garLoopResultBuilder]: At program point L138-2(lines 134 145) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (= 0 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse3) (or .cse4 .cse2 .cse5) (or .cse4 .cse3 .cse5) (or .cse4 .cse1 .cse3) (or .cse4 .cse1 .cse2))) [2022-07-13 17:58:14,535 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 170 178) the Hoare annotation is: true [2022-07-13 17:58:14,535 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 170 178) no Hoare annotation was computed. [2022-07-13 17:58:14,535 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 170 178) no Hoare annotation was computed. [2022-07-13 17:58:14,535 INFO L902 garLoopResultBuilder]: At program point L944(lines 937 946) the Hoare annotation is: true [2022-07-13 17:58:14,536 INFO L895 garLoopResultBuilder]: At program point L106(lines 102 108) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:14,536 INFO L899 garLoopResultBuilder]: For program point L453(lines 452 499) no Hoare annotation was computed. [2022-07-13 17:58:14,536 INFO L899 garLoopResultBuilder]: For program point L482(lines 482 495) no Hoare annotation was computed. [2022-07-13 17:58:14,536 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-13 17:58:14,536 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-13 17:58:14,537 INFO L899 garLoopResultBuilder]: For program point L957(lines 957 964) no Hoare annotation was computed. [2022-07-13 17:58:14,537 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-13 17:58:14,537 INFO L899 garLoopResultBuilder]: For program point L957-2(lines 957 964) no Hoare annotation was computed. [2022-07-13 17:58:14,537 INFO L895 garLoopResultBuilder]: At program point L474(line 474) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2))) [2022-07-13 17:58:14,537 INFO L902 garLoopResultBuilder]: At program point L503(lines 442 507) the Hoare annotation is: true [2022-07-13 17:58:14,537 INFO L895 garLoopResultBuilder]: At program point L437(lines 425 439) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2022-07-13 17:58:14,538 INFO L899 garLoopResultBuilder]: For program point L462(lines 462 468) no Hoare annotation was computed. [2022-07-13 17:58:14,538 INFO L899 garLoopResultBuilder]: For program point L462-1(lines 462 468) no Hoare annotation was computed. [2022-07-13 17:58:14,538 INFO L899 garLoopResultBuilder]: For program point L429(lines 429 435) no Hoare annotation was computed. [2022-07-13 17:58:14,538 INFO L899 garLoopResultBuilder]: For program point L429-1(lines 429 435) no Hoare annotation was computed. [2022-07-13 17:58:14,538 INFO L899 garLoopResultBuilder]: For program point L454(lines 454 458) no Hoare annotation was computed. [2022-07-13 17:58:14,538 INFO L902 garLoopResultBuilder]: At program point L966(lines 947 969) the Hoare annotation is: true [2022-07-13 17:58:14,538 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-13 17:58:14,538 INFO L895 garLoopResultBuilder]: At program point L500(lines 451 501) the Hoare annotation is: false [2022-07-13 17:58:14,539 INFO L899 garLoopResultBuilder]: For program point L488(lines 488 494) no Hoare annotation was computed. [2022-07-13 17:58:14,539 INFO L895 garLoopResultBuilder]: At program point L934(lines 930 936) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:14,539 INFO L895 garLoopResultBuilder]: At program point L488-2(lines 482 495) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse4 .cse2) (and .cse0 .cse5 .cse2 .cse3) (and .cse5 .cse4 .cse2))) [2022-07-13 17:58:14,539 INFO L895 garLoopResultBuilder]: At program point L121(lines 116 124) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:14,539 INFO L899 garLoopResultBuilder]: For program point L472(lines 472 478) no Hoare annotation was computed. [2022-07-13 17:58:14,540 INFO L899 garLoopResultBuilder]: For program point L472-1(lines 472 478) no Hoare annotation was computed. [2022-07-13 17:58:14,540 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:14,540 INFO L895 garLoopResultBuilder]: At program point L497(lines 452 499) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2))) [2022-07-13 17:58:14,540 INFO L895 garLoopResultBuilder]: At program point L464(line 464) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2))) [2022-07-13 17:58:14,542 INFO L895 garLoopResultBuilder]: At program point L431(line 431) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2) (and .cse3 .cse4 .cse2 .cse5) (and .cse3 .cse1 .cse2) (and .cse0 .cse4 .cse2 .cse5))) [2022-07-13 17:58:14,542 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 146 157) no Hoare annotation was computed. [2022-07-13 17:58:14,542 INFO L899 garLoopResultBuilder]: For program point L150-1(lines 146 157) no Hoare annotation was computed. [2022-07-13 17:58:14,542 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 146 157) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3) (or .cse5 .cse4 .cse2) (or .cse0 .cse5 .cse1 .cse2))) [2022-07-13 17:58:14,542 INFO L899 garLoopResultBuilder]: For program point L415(lines 415 419) no Hoare annotation was computed. [2022-07-13 17:58:14,542 INFO L899 garLoopResultBuilder]: For program point L415-2(lines 415 419) no Hoare annotation was computed. [2022-07-13 17:58:14,542 INFO L895 garLoopResultBuilder]: At program point L285(line 285) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-07-13 17:58:14,543 INFO L899 garLoopResultBuilder]: For program point L285-1(lines 266 290) no Hoare annotation was computed. [2022-07-13 17:58:14,543 INFO L899 garLoopResultBuilder]: For program point L215(lines 215 221) no Hoare annotation was computed. [2022-07-13 17:58:14,543 INFO L895 garLoopResultBuilder]: At program point L220(lines 211 224) the Hoare annotation is: (let ((.cse3 (not (= 1 ~systemActive~0))) (.cse1 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (<= 2 ~waterLevel~0))) (and (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse0 .cse1 .cse2) .cse3 (and .cse0 .cse2 .cse4) (not (= ~methaneLevelCritical~0 0)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse3 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse4)))) [2022-07-13 17:58:14,543 INFO L895 garLoopResultBuilder]: At program point L280(line 280) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |processEnvironment__wrappee__methaneQuery_~tmp~1#1| 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2)) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse1 .cse2) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-07-13 17:58:14,543 INFO L899 garLoopResultBuilder]: For program point L274(lines 274 282) no Hoare annotation was computed. [2022-07-13 17:58:14,543 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 266 290) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-07-13 17:58:14,543 INFO L899 garLoopResultBuilder]: For program point L270(lines 270 287) no Hoare annotation was computed. [2022-07-13 17:58:14,544 INFO L899 garLoopResultBuilder]: For program point L332(lines 332 338) no Hoare annotation was computed. [2022-07-13 17:58:14,544 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 266 290) no Hoare annotation was computed. [2022-07-13 17:58:14,544 INFO L895 garLoopResultBuilder]: At program point L330(line 330) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2)) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2022-07-13 17:58:14,544 INFO L895 garLoopResultBuilder]: At program point L332-2(lines 325 341) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 0) .cse1 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~3#1|))) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-07-13 17:58:14,544 INFO L899 garLoopResultBuilder]: For program point L330-1(line 330) no Hoare annotation was computed. [2022-07-13 17:58:14,544 INFO L895 garLoopResultBuilder]: At program point L421(lines 406 424) the Hoare annotation is: (let ((.cse7 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse7)) (.cse1 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0)) (.cse3 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 .cse2 .cse3) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse4)) (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~methaneLevelCritical~0 0))) (or .cse0 (and .cse1 .cse5 .cse2 .cse6 .cse7 .cse3) (not .cse6) (and .cse5 .cse2 .cse6 .cse4 .cse7)))))) [2022-07-13 17:58:14,545 INFO L895 garLoopResultBuilder]: At program point L322(lines 317 324) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0))))) [2022-07-13 17:58:14,545 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 350 360) the Hoare annotation is: true [2022-07-13 17:58:14,545 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 350 360) no Hoare annotation was computed. [2022-07-13 17:58:14,545 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 350 360) no Hoare annotation was computed. [2022-07-13 17:58:14,545 INFO L902 garLoopResultBuilder]: At program point L355(line 355) the Hoare annotation is: true [2022-07-13 17:58:14,546 INFO L899 garLoopResultBuilder]: For program point L355-1(line 355) no Hoare annotation was computed. [2022-07-13 17:58:14,549 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:14,551 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-13 17:58:14,584 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.07 05:58:14 BoogieIcfgContainer [2022-07-13 17:58:14,588 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-13 17:58:14,589 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-13 17:58:14,589 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-13 17:58:14,589 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-13 17:58:14,589 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:05" (3/4) ... [2022-07-13 17:58:14,593 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-13 17:58:14,598 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-13 17:58:14,598 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-13 17:58:14,598 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-13 17:58:14,598 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-13 17:58:14,598 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-13 17:58:14,598 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-13 17:58:14,599 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-13 17:58:14,599 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-13 17:58:14,599 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-13 17:58:14,611 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 49 nodes and edges [2022-07-13 17:58:14,611 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-13 17:58:14,612 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-13 17:58:14,612 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-13 17:58:14,612 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-13 17:58:14,613 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:58:14,613 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:58:14,637 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:14,638 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) [2022-07-13 17:58:14,640 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || (tmp == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel)) && (((((pumpRunning == 0 && tmp == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) [2022-07-13 17:58:14,640 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:14,640 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:14,640 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:14,641 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-07-13 17:58:14,641 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:14,641 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((tmp___0 == 0 && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive)) [2022-07-13 17:58:14,672 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-13 17:58:14,672 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-13 17:58:14,673 INFO L158 Benchmark]: Toolchain (without parser) took 10051.51ms. Allocated memory was 96.5MB in the beginning and 188.7MB in the end (delta: 92.3MB). Free memory was 57.2MB in the beginning and 121.4MB in the end (delta: -64.2MB). Peak memory consumption was 26.9MB. Max. memory is 16.1GB. [2022-07-13 17:58:14,673 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 96.5MB. Free memory was 74.5MB in the beginning and 74.4MB in the end (delta: 125.9kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 17:58:14,673 INFO L158 Benchmark]: CACSL2BoogieTranslator took 436.39ms. Allocated memory is still 96.5MB. Free memory was 57.0MB in the beginning and 56.9MB in the end (delta: 99.7kB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-13 17:58:14,674 INFO L158 Benchmark]: Boogie Procedure Inliner took 73.34ms. Allocated memory is still 96.5MB. Free memory was 56.9MB in the beginning and 54.5MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:58:14,674 INFO L158 Benchmark]: Boogie Preprocessor took 34.00ms. Allocated memory is still 96.5MB. Free memory was 54.5MB in the beginning and 52.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:58:14,675 INFO L158 Benchmark]: RCFGBuilder took 431.89ms. Allocated memory was 96.5MB in the beginning and 130.0MB in the end (delta: 33.6MB). Free memory was 52.8MB in the beginning and 103.9MB in the end (delta: -51.1MB). Peak memory consumption was 23.9MB. Max. memory is 16.1GB. [2022-07-13 17:58:14,675 INFO L158 Benchmark]: TraceAbstraction took 8986.36ms. Allocated memory was 130.0MB in the beginning and 188.7MB in the end (delta: 58.7MB). Free memory was 103.9MB in the beginning and 126.6MB in the end (delta: -22.8MB). Peak memory consumption was 108.5MB. Max. memory is 16.1GB. [2022-07-13 17:58:14,675 INFO L158 Benchmark]: Witness Printer took 83.88ms. Allocated memory is still 188.7MB. Free memory was 126.6MB in the beginning and 121.4MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-13 17:58:14,677 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 96.5MB. Free memory was 74.5MB in the beginning and 74.4MB in the end (delta: 125.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 436.39ms. Allocated memory is still 96.5MB. Free memory was 57.0MB in the beginning and 56.9MB in the end (delta: 99.7kB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 73.34ms. Allocated memory is still 96.5MB. Free memory was 56.9MB in the beginning and 54.5MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.00ms. Allocated memory is still 96.5MB. Free memory was 54.5MB in the beginning and 52.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 431.89ms. Allocated memory was 96.5MB in the beginning and 130.0MB in the end (delta: 33.6MB). Free memory was 52.8MB in the beginning and 103.9MB in the end (delta: -51.1MB). Peak memory consumption was 23.9MB. Max. memory is 16.1GB. * TraceAbstraction took 8986.36ms. Allocated memory was 130.0MB in the beginning and 188.7MB in the end (delta: 58.7MB). Free memory was 103.9MB in the beginning and 126.6MB in the end (delta: -22.8MB). Peak memory consumption was 108.5MB. Max. memory is 16.1GB. * Witness Printer took 83.88ms. Allocated memory is still 188.7MB. Free memory was 126.6MB in the beginning and 121.4MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 83]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 100 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.9s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1607 SdHoareTripleChecker+Valid, 1.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1567 mSDsluCounter, 3999 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2605 mSDsCounter, 543 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1938 IncrementalHoareTripleChecker+Invalid, 2481 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 543 mSolverCounterUnsat, 1394 mSDtfsCounter, 1938 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 368 GetRequests, 263 SyntacticMatches, 1 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 155 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1049occurred in iteration=8, InterpolantAutomatonStates: 88, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 147 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 2324 PreInvPairs, 2637 NumberOfFragments, 1724 HoareAnnotationTreeSize, 2324 FomulaSimplifications, 1552 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 45 FomulaSimplificationsInter, 11261 FormulaSimplificationTreeSizeReductionInter, 3.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 742 NumberOfCodeBlocks, 742 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 729 ConstructedInterpolants, 0 QuantifiedInterpolants, 1385 SizeOfPredicates, 6 NumberOfNonLiveVariables, 863 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 113/127 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 79]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 406]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((tmp___0 == 0 && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) && (((!(1 == systemActive) || (((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive)) - InvariantResult [Line: 947]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 876]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive)) || ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 317]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 53]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || (tmp == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && tmp == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel)) && (((((pumpRunning == 0 && tmp == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 451]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-07-13 17:58:14,736 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE