./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-13 17:58:12,107 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-13 17:58:12,109 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-13 17:58:12,143 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-13 17:58:12,144 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-13 17:58:12,145 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-13 17:58:12,146 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-13 17:58:12,147 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-13 17:58:12,149 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-13 17:58:12,152 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-13 17:58:12,152 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-13 17:58:12,154 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-13 17:58:12,154 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-13 17:58:12,155 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-13 17:58:12,156 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-13 17:58:12,158 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-13 17:58:12,159 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-13 17:58:12,160 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-13 17:58:12,161 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-13 17:58:12,165 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-13 17:58:12,166 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-13 17:58:12,167 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-13 17:58:12,168 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-13 17:58:12,168 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-13 17:58:12,169 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-13 17:58:12,174 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-13 17:58:12,175 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-13 17:58:12,183 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-13 17:58:12,184 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-13 17:58:12,184 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-13 17:58:12,185 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-13 17:58:12,185 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-13 17:58:12,185 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-13 17:58:12,186 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-13 17:58:12,186 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-13 17:58:12,187 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-13 17:58:12,187 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-13 17:58:12,187 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-13 17:58:12,187 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-13 17:58:12,187 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-13 17:58:12,188 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-13 17:58:12,189 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-13 17:58:12,190 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-13 17:58:12,209 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-13 17:58:12,209 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-13 17:58:12,209 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-13 17:58:12,209 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-13 17:58:12,210 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-13 17:58:12,210 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-13 17:58:12,211 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-13 17:58:12,211 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-13 17:58:12,211 INFO L138 SettingsManager]: * Use SBE=true [2022-07-13 17:58:12,211 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-13 17:58:12,212 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-13 17:58:12,212 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-13 17:58:12,212 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-13 17:58:12,212 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-13 17:58:12,212 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-13 17:58:12,212 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-13 17:58:12,212 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-13 17:58:12,213 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-13 17:58:12,213 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-13 17:58:12,213 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-13 17:58:12,213 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-13 17:58:12,213 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-13 17:58:12,213 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-13 17:58:12,213 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-13 17:58:12,214 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:58:12,214 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-13 17:58:12,214 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-13 17:58:12,214 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-13 17:58:12,214 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-13 17:58:12,214 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-13 17:58:12,215 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-13 17:58:12,215 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-13 17:58:12,215 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-13 17:58:12,215 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 [2022-07-13 17:58:12,371 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-13 17:58:12,384 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-13 17:58:12,386 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-13 17:58:12,387 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-13 17:58:12,387 INFO L275 PluginConnector]: CDTParser initialized [2022-07-13 17:58:12,388 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2022-07-13 17:58:12,428 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/53bcca389/c4f56f2e6f234ae28c899ef234204483/FLAGec0de8cdf [2022-07-13 17:58:12,837 INFO L306 CDTParser]: Found 1 translation units. [2022-07-13 17:58:12,837 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2022-07-13 17:58:12,844 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/53bcca389/c4f56f2e6f234ae28c899ef234204483/FLAGec0de8cdf [2022-07-13 17:58:12,852 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/53bcca389/c4f56f2e6f234ae28c899ef234204483 [2022-07-13 17:58:12,854 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-13 17:58:12,855 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-13 17:58:12,856 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-13 17:58:12,856 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-13 17:58:12,867 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-13 17:58:12,867 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:58:12" (1/1) ... [2022-07-13 17:58:12,868 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6a07bf76 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:12, skipping insertion in model container [2022-07-13 17:58:12,868 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:58:12" (1/1) ... [2022-07-13 17:58:12,873 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-13 17:58:12,895 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-13 17:58:13,077 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2022-07-13 17:58:13,091 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:58:13,097 INFO L203 MainTranslator]: Completed pre-run [2022-07-13 17:58:13,150 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2022-07-13 17:58:13,158 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:58:13,170 INFO L208 MainTranslator]: Completed translation [2022-07-13 17:58:13,170 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13 WrapperNode [2022-07-13 17:58:13,170 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-13 17:58:13,171 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-13 17:58:13,171 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-13 17:58:13,171 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-13 17:58:13,177 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:13,187 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:13,210 INFO L137 Inliner]: procedures = 58, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 274 [2022-07-13 17:58:13,210 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-13 17:58:13,211 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-13 17:58:13,211 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-13 17:58:13,211 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-13 17:58:13,217 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:13,217 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:13,219 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:13,219 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:13,223 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:13,226 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:13,228 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:13,229 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-13 17:58:13,230 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-13 17:58:13,230 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-13 17:58:13,230 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-13 17:58:13,245 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (1/1) ... [2022-07-13 17:58:13,254 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:58:13,266 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:13,280 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-13 17:58:13,298 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-13 17:58:13,314 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-13 17:58:13,315 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-13 17:58:13,315 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-13 17:58:13,315 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-13 17:58:13,315 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-13 17:58:13,315 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-13 17:58:13,316 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-13 17:58:13,316 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-13 17:58:13,316 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-13 17:58:13,316 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:58:13,316 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:58:13,316 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-13 17:58:13,316 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-13 17:58:13,317 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-13 17:58:13,317 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-13 17:58:13,317 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-13 17:58:13,317 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-13 17:58:13,317 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-13 17:58:13,317 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-13 17:58:13,317 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-13 17:58:13,370 INFO L234 CfgBuilder]: Building ICFG [2022-07-13 17:58:13,371 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-13 17:58:13,627 INFO L275 CfgBuilder]: Performing block encoding [2022-07-13 17:58:13,637 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-13 17:58:13,637 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-13 17:58:13,638 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:13 BoogieIcfgContainer [2022-07-13 17:58:13,638 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-13 17:58:13,640 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-13 17:58:13,640 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-13 17:58:13,642 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-13 17:58:13,642 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.07 05:58:12" (1/3) ... [2022-07-13 17:58:13,643 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d158218 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:58:13, skipping insertion in model container [2022-07-13 17:58:13,643 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:13" (2/3) ... [2022-07-13 17:58:13,643 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d158218 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:58:13, skipping insertion in model container [2022-07-13 17:58:13,643 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:13" (3/3) ... [2022-07-13 17:58:13,644 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product60.cil.c [2022-07-13 17:58:13,654 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-13 17:58:13,654 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-13 17:58:13,703 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-13 17:58:13,708 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@5539f2ba, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@4d13e4f8 [2022-07-13 17:58:13,708 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-13 17:58:13,721 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-13 17:58:13,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-07-13 17:58:13,747 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:13,747 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:13,748 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:13,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:13,753 INFO L85 PathProgramCache]: Analyzing trace with hash 47908020, now seen corresponding path program 1 times [2022-07-13 17:58:13,759 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:13,760 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2121525187] [2022-07-13 17:58:13,772 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:13,773 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:13,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:13,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-13 17:58:14,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:14,008 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:14,008 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:14,009 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2121525187] [2022-07-13 17:58:14,009 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2121525187] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:14,009 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:14,009 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-13 17:58:14,010 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1569938879] [2022-07-13 17:58:14,011 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:14,013 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-13 17:58:14,014 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:14,036 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-13 17:58:14,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:58:14,040 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:14,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:14,082 INFO L93 Difference]: Finished difference Result 190 states and 257 transitions. [2022-07-13 17:58:14,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-13 17:58:14,085 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-07-13 17:58:14,085 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:14,094 INFO L225 Difference]: With dead ends: 190 [2022-07-13 17:58:14,094 INFO L226 Difference]: Without dead ends: 90 [2022-07-13 17:58:14,098 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:58:14,101 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:14,102 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:14,113 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2022-07-13 17:58:14,138 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2022-07-13 17:58:14,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 76 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-13 17:58:14,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 116 transitions. [2022-07-13 17:58:14,146 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 116 transitions. Word has length 23 [2022-07-13 17:58:14,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:14,147 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 116 transitions. [2022-07-13 17:58:14,147 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:14,147 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 116 transitions. [2022-07-13 17:58:14,149 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-07-13 17:58:14,149 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:14,150 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:14,150 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-13 17:58:14,150 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:14,152 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:14,152 INFO L85 PathProgramCache]: Analyzing trace with hash 776313737, now seen corresponding path program 1 times [2022-07-13 17:58:14,152 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:14,152 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [655777780] [2022-07-13 17:58:14,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:14,152 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:14,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:14,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 17:58:14,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:14,252 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:14,254 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:14,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [655777780] [2022-07-13 17:58:14,255 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [655777780] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:14,255 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:14,255 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 17:58:14,256 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [193099407] [2022-07-13 17:58:14,256 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:14,257 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:58:14,257 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:14,258 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:58:14,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:14,259 INFO L87 Difference]: Start difference. First operand 90 states and 116 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:14,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:14,272 INFO L93 Difference]: Finished difference Result 141 states and 181 transitions. [2022-07-13 17:58:14,276 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:58:14,276 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-07-13 17:58:14,276 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:14,278 INFO L225 Difference]: With dead ends: 141 [2022-07-13 17:58:14,278 INFO L226 Difference]: Without dead ends: 81 [2022-07-13 17:58:14,283 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:14,285 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 17 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:14,286 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 184 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:14,289 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-07-13 17:58:14,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-07-13 17:58:14,297 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 70 states have internal predecessors, (82), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-13 17:58:14,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 104 transitions. [2022-07-13 17:58:14,298 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 104 transitions. Word has length 24 [2022-07-13 17:58:14,298 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:14,299 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 104 transitions. [2022-07-13 17:58:14,299 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:14,300 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 104 transitions. [2022-07-13 17:58:14,304 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-07-13 17:58:14,304 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:14,305 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:14,305 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-13 17:58:14,305 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:14,305 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:14,306 INFO L85 PathProgramCache]: Analyzing trace with hash -6644295, now seen corresponding path program 1 times [2022-07-13 17:58:14,306 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:14,306 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2053830558] [2022-07-13 17:58:14,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:14,306 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:14,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:14,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:58:14,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:14,400 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:14,403 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:14,404 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2053830558] [2022-07-13 17:58:14,404 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2053830558] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:14,404 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:14,404 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:58:14,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1709492912] [2022-07-13 17:58:14,405 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:14,405 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:58:14,405 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:14,405 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:58:14,406 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:58:14,406 INFO L87 Difference]: Start difference. First operand 81 states and 104 transitions. Second operand has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:14,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:14,489 INFO L93 Difference]: Finished difference Result 197 states and 256 transitions. [2022-07-13 17:58:14,489 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-13 17:58:14,489 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2022-07-13 17:58:14,490 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:14,490 INFO L225 Difference]: With dead ends: 197 [2022-07-13 17:58:14,491 INFO L226 Difference]: Without dead ends: 123 [2022-07-13 17:58:14,491 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-13 17:58:14,492 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 167 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 348 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:14,492 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 348 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:14,493 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123 states. [2022-07-13 17:58:14,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123 to 120. [2022-07-13 17:58:14,506 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 120 states, 91 states have (on average 1.3406593406593406) internal successors, (122), 102 states have internal predecessors, (122), 16 states have call successors, (16), 12 states have call predecessors, (16), 12 states have return successors, (17), 12 states have call predecessors, (17), 16 states have call successors, (17) [2022-07-13 17:58:14,517 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120 states to 120 states and 155 transitions. [2022-07-13 17:58:14,518 INFO L78 Accepts]: Start accepts. Automaton has 120 states and 155 transitions. Word has length 29 [2022-07-13 17:58:14,518 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:14,518 INFO L495 AbstractCegarLoop]: Abstraction has 120 states and 155 transitions. [2022-07-13 17:58:14,518 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.2) internal successors, (26), 5 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:14,518 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 155 transitions. [2022-07-13 17:58:14,519 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-13 17:58:14,519 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:14,519 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:14,519 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-13 17:58:14,520 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:14,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:14,520 INFO L85 PathProgramCache]: Analyzing trace with hash -999312607, now seen corresponding path program 1 times [2022-07-13 17:58:14,520 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:14,520 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [241536549] [2022-07-13 17:58:14,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:14,521 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:14,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:14,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-13 17:58:14,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:14,610 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:14,610 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:14,610 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [241536549] [2022-07-13 17:58:14,610 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [241536549] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:14,610 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:14,611 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:14,611 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2004137140] [2022-07-13 17:58:14,611 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:14,612 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:14,612 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:14,612 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:14,613 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:14,613 INFO L87 Difference]: Start difference. First operand 120 states and 155 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:14,780 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:14,780 INFO L93 Difference]: Finished difference Result 346 states and 458 transitions. [2022-07-13 17:58:14,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:58:14,781 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-07-13 17:58:14,781 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:14,782 INFO L225 Difference]: With dead ends: 346 [2022-07-13 17:58:14,783 INFO L226 Difference]: Without dead ends: 233 [2022-07-13 17:58:14,783 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-07-13 17:58:14,784 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 75 mSDsluCounter, 397 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 509 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:14,784 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 509 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:14,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 233 states. [2022-07-13 17:58:14,802 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 233 to 227. [2022-07-13 17:58:14,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 227 states, 170 states have (on average 1.3294117647058823) internal successors, (226), 191 states have internal predecessors, (226), 32 states have call successors, (32), 24 states have call predecessors, (32), 24 states have return successors, (36), 24 states have call predecessors, (36), 32 states have call successors, (36) [2022-07-13 17:58:14,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 294 transitions. [2022-07-13 17:58:14,809 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 294 transitions. Word has length 32 [2022-07-13 17:58:14,809 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:14,809 INFO L495 AbstractCegarLoop]: Abstraction has 227 states and 294 transitions. [2022-07-13 17:58:14,809 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:14,810 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 294 transitions. [2022-07-13 17:58:14,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-07-13 17:58:14,811 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:14,811 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:14,811 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-13 17:58:14,811 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:14,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:14,811 INFO L85 PathProgramCache]: Analyzing trace with hash -756738107, now seen corresponding path program 1 times [2022-07-13 17:58:14,812 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:14,812 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1091845494] [2022-07-13 17:58:14,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:14,812 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:14,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:14,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-13 17:58:14,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:14,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-13 17:58:14,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:14,853 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:14,854 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:14,854 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1091845494] [2022-07-13 17:58:14,854 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1091845494] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:14,854 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:14,854 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:14,854 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1958623312] [2022-07-13 17:58:14,855 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:14,855 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:14,855 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:14,855 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:14,855 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:14,856 INFO L87 Difference]: Start difference. First operand 227 states and 294 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 17:58:15,051 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:15,051 INFO L93 Difference]: Finished difference Result 528 states and 702 transitions. [2022-07-13 17:58:15,051 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:58:15,052 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 36 [2022-07-13 17:58:15,052 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:15,060 INFO L225 Difference]: With dead ends: 528 [2022-07-13 17:58:15,060 INFO L226 Difference]: Without dead ends: 308 [2022-07-13 17:58:15,061 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-13 17:58:15,061 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 125 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 245 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 202 SdHoareTripleChecker+Invalid, 288 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 245 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:15,062 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 202 Invalid, 288 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 245 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:58:15,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2022-07-13 17:58:15,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 297. [2022-07-13 17:58:15,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 297 states, 224 states have (on average 1.2723214285714286) internal successors, (285), 245 states have internal predecessors, (285), 38 states have call successors, (38), 34 states have call predecessors, (38), 34 states have return successors, (53), 36 states have call predecessors, (53), 38 states have call successors, (53) [2022-07-13 17:58:15,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 297 states to 297 states and 376 transitions. [2022-07-13 17:58:15,080 INFO L78 Accepts]: Start accepts. Automaton has 297 states and 376 transitions. Word has length 36 [2022-07-13 17:58:15,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:15,080 INFO L495 AbstractCegarLoop]: Abstraction has 297 states and 376 transitions. [2022-07-13 17:58:15,080 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 17:58:15,080 INFO L276 IsEmpty]: Start isEmpty. Operand 297 states and 376 transitions. [2022-07-13 17:58:15,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-13 17:58:15,081 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:15,082 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:15,082 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-13 17:58:15,082 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:15,082 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:15,082 INFO L85 PathProgramCache]: Analyzing trace with hash -1441513323, now seen corresponding path program 1 times [2022-07-13 17:58:15,082 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:15,083 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [405635723] [2022-07-13 17:58:15,083 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:15,083 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:15,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-13 17:58:15,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:58:15,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:15,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-13 17:58:15,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,132 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:58:15,132 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:15,132 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [405635723] [2022-07-13 17:58:15,132 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [405635723] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:15,132 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:15,133 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 17:58:15,133 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [260524465] [2022-07-13 17:58:15,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:15,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 17:58:15,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:15,134 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 17:58:15,134 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:58:15,134 INFO L87 Difference]: Start difference. First operand 297 states and 376 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:58:15,328 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:15,328 INFO L93 Difference]: Finished difference Result 645 states and 837 transitions. [2022-07-13 17:58:15,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 17:58:15,329 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-07-13 17:58:15,329 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:15,331 INFO L225 Difference]: With dead ends: 645 [2022-07-13 17:58:15,331 INFO L226 Difference]: Without dead ends: 355 [2022-07-13 17:58:15,332 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-13 17:58:15,333 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 133 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 297 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 220 SdHoareTripleChecker+Invalid, 347 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 297 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:15,333 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 220 Invalid, 347 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 297 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:15,334 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 355 states. [2022-07-13 17:58:15,348 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 355 to 343. [2022-07-13 17:58:15,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 260 states have (on average 1.2461538461538462) internal successors, (324), 281 states have internal predecessors, (324), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (63), 44 states have call predecessors, (63), 42 states have call successors, (63) [2022-07-13 17:58:15,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 429 transitions. [2022-07-13 17:58:15,351 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 429 transitions. Word has length 55 [2022-07-13 17:58:15,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:15,351 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 429 transitions. [2022-07-13 17:58:15,351 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:58:15,352 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 429 transitions. [2022-07-13 17:58:15,353 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-07-13 17:58:15,353 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:15,353 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:15,353 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-13 17:58:15,353 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:15,354 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:15,354 INFO L85 PathProgramCache]: Analyzing trace with hash -468214013, now seen corresponding path program 1 times [2022-07-13 17:58:15,354 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:15,354 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1694475081] [2022-07-13 17:58:15,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:15,354 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:15,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-13 17:58:15,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-13 17:58:15,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:15,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-07-13 17:58:15,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,389 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:58:15,389 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:15,389 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1694475081] [2022-07-13 17:58:15,389 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1694475081] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:15,389 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:15,389 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:58:15,390 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1963554180] [2022-07-13 17:58:15,390 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:15,390 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:58:15,390 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:15,391 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:58:15,391 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:58:15,391 INFO L87 Difference]: Start difference. First operand 343 states and 429 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:58:15,530 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:15,531 INFO L93 Difference]: Finished difference Result 685 states and 856 transitions. [2022-07-13 17:58:15,531 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:58:15,531 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 58 [2022-07-13 17:58:15,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:15,533 INFO L225 Difference]: With dead ends: 685 [2022-07-13 17:58:15,533 INFO L226 Difference]: Without dead ends: 349 [2022-07-13 17:58:15,534 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-13 17:58:15,534 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 159 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 163 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 206 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:15,535 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [163 Valid, 214 Invalid, 206 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:15,535 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2022-07-13 17:58:15,545 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 343. [2022-07-13 17:58:15,546 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 260 states have (on average 1.2384615384615385) internal successors, (322), 281 states have internal predecessors, (322), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (59), 44 states have call predecessors, (59), 42 states have call successors, (59) [2022-07-13 17:58:15,547 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 423 transitions. [2022-07-13 17:58:15,547 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 423 transitions. Word has length 58 [2022-07-13 17:58:15,547 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:15,547 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 423 transitions. [2022-07-13 17:58:15,548 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:58:15,548 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 423 transitions. [2022-07-13 17:58:15,548 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-13 17:58:15,549 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:15,549 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:15,549 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-13 17:58:15,549 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:15,549 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:15,550 INFO L85 PathProgramCache]: Analyzing trace with hash -1379473709, now seen corresponding path program 1 times [2022-07-13 17:58:15,550 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:15,550 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [487437610] [2022-07-13 17:58:15,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:15,550 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:15,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-13 17:58:15,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:58:15,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:15,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-13 17:58:15,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,589 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:58:15,589 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:15,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [487437610] [2022-07-13 17:58:15,589 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [487437610] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:15,589 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:15,589 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:15,590 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1880421062] [2022-07-13 17:58:15,590 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:15,590 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:15,590 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:15,590 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:15,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:15,591 INFO L87 Difference]: Start difference. First operand 343 states and 423 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:58:15,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:15,754 INFO L93 Difference]: Finished difference Result 697 states and 878 transitions. [2022-07-13 17:58:15,754 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:58:15,755 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-07-13 17:58:15,755 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:15,757 INFO L225 Difference]: With dead ends: 697 [2022-07-13 17:58:15,757 INFO L226 Difference]: Without dead ends: 361 [2022-07-13 17:58:15,758 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-07-13 17:58:15,759 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 137 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 138 SdHoareTripleChecker+Valid, 192 SdHoareTripleChecker+Invalid, 263 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:15,759 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [138 Valid, 192 Invalid, 263 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:15,759 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 361 states. [2022-07-13 17:58:15,770 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 361 to 347. [2022-07-13 17:58:15,770 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 264 states have (on average 1.2348484848484849) internal successors, (326), 285 states have internal predecessors, (326), 42 states have call successors, (42), 34 states have call predecessors, (42), 40 states have return successors, (59), 44 states have call predecessors, (59), 42 states have call successors, (59) [2022-07-13 17:58:15,772 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 427 transitions. [2022-07-13 17:58:15,772 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 427 transitions. Word has length 55 [2022-07-13 17:58:15,772 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:15,772 INFO L495 AbstractCegarLoop]: Abstraction has 347 states and 427 transitions. [2022-07-13 17:58:15,773 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:58:15,773 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 427 transitions. [2022-07-13 17:58:15,773 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-13 17:58:15,773 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:15,774 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:15,774 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-13 17:58:15,774 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:15,774 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:15,774 INFO L85 PathProgramCache]: Analyzing trace with hash -1888946799, now seen corresponding path program 1 times [2022-07-13 17:58:15,775 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:15,775 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [868381971] [2022-07-13 17:58:15,775 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:15,775 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:15,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-07-13 17:58:15,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:58:15,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:15,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-07-13 17:58:15,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:15,821 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:58:15,821 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:15,821 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [868381971] [2022-07-13 17:58:15,821 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [868381971] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:15,821 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:15,821 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:15,822 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [372504459] [2022-07-13 17:58:15,822 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:15,822 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:15,822 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:15,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:15,823 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:15,823 INFO L87 Difference]: Start difference. First operand 347 states and 427 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-13 17:58:16,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:16,093 INFO L93 Difference]: Finished difference Result 1063 states and 1356 transitions. [2022-07-13 17:58:16,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-13 17:58:16,094 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2022-07-13 17:58:16,095 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:16,098 INFO L225 Difference]: With dead ends: 1063 [2022-07-13 17:58:16,098 INFO L226 Difference]: Without dead ends: 723 [2022-07-13 17:58:16,099 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-13 17:58:16,101 INFO L413 NwaCegarLoop]: 136 mSDtfsCounter, 321 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 269 mSolverCounterSat, 126 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 324 SdHoareTripleChecker+Valid, 258 SdHoareTripleChecker+Invalid, 395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 126 IncrementalHoareTripleChecker+Valid, 269 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:16,101 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [324 Valid, 258 Invalid, 395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [126 Valid, 269 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:58:16,102 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 723 states. [2022-07-13 17:58:16,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 723 to 721. [2022-07-13 17:58:16,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 721 states, 546 states have (on average 1.2106227106227105) internal successors, (661), 583 states have internal predecessors, (661), 90 states have call successors, (90), 84 states have call predecessors, (90), 84 states have return successors, (138), 88 states have call predecessors, (138), 90 states have call successors, (138) [2022-07-13 17:58:16,133 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 721 states to 721 states and 889 transitions. [2022-07-13 17:58:16,134 INFO L78 Accepts]: Start accepts. Automaton has 721 states and 889 transitions. Word has length 55 [2022-07-13 17:58:16,134 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:16,134 INFO L495 AbstractCegarLoop]: Abstraction has 721 states and 889 transitions. [2022-07-13 17:58:16,134 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-13 17:58:16,135 INFO L276 IsEmpty]: Start isEmpty. Operand 721 states and 889 transitions. [2022-07-13 17:58:16,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-07-13 17:58:16,136 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:16,136 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:16,137 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-13 17:58:16,137 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:16,137 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:16,137 INFO L85 PathProgramCache]: Analyzing trace with hash 625238315, now seen corresponding path program 1 times [2022-07-13 17:58:16,137 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:16,137 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [183406253] [2022-07-13 17:58:16,138 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:16,138 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:16,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:58:16,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-13 17:58:16,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 17:58:16,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:16,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-07-13 17:58:16,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,237 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-13 17:58:16,237 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:16,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [183406253] [2022-07-13 17:58:16,237 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [183406253] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:58:16,238 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1040252826] [2022-07-13 17:58:16,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:16,238 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:16,238 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:16,240 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:58:16,274 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-13 17:58:16,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:16,313 INFO L263 TraceCheckSpWp]: Trace formula consists of 378 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-13 17:58:16,318 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:58:16,477 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:16,484 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 17:58:16,484 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1040252826] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:16,485 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 17:58:16,485 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2022-07-13 17:58:16,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [880584338] [2022-07-13 17:58:16,485 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:16,485 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 17:58:16,486 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:16,487 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 17:58:16,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=264, Unknown=0, NotChecked=0, Total=306 [2022-07-13 17:58:16,488 INFO L87 Difference]: Start difference. First operand 721 states and 889 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-13 17:58:16,644 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:16,644 INFO L93 Difference]: Finished difference Result 1414 states and 1750 transitions. [2022-07-13 17:58:16,645 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:58:16,645 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 59 [2022-07-13 17:58:16,646 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:16,648 INFO L225 Difference]: With dead ends: 1414 [2022-07-13 17:58:16,648 INFO L226 Difference]: Without dead ends: 700 [2022-07-13 17:58:16,650 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-07-13 17:58:16,650 INFO L413 NwaCegarLoop]: 189 mSDtfsCounter, 76 mSDsluCounter, 635 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 824 SdHoareTripleChecker+Invalid, 137 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:16,651 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 824 Invalid, 137 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:16,652 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 700 states. [2022-07-13 17:58:16,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 700 to 698. [2022-07-13 17:58:16,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 698 states, 528 states have (on average 1.1950757575757576) internal successors, (631), 564 states have internal predecessors, (631), 88 states have call successors, (88), 82 states have call predecessors, (88), 81 states have return successors, (121), 85 states have call predecessors, (121), 88 states have call successors, (121) [2022-07-13 17:58:16,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 698 states to 698 states and 840 transitions. [2022-07-13 17:58:16,682 INFO L78 Accepts]: Start accepts. Automaton has 698 states and 840 transitions. Word has length 59 [2022-07-13 17:58:16,682 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:16,682 INFO L495 AbstractCegarLoop]: Abstraction has 698 states and 840 transitions. [2022-07-13 17:58:16,683 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-07-13 17:58:16,683 INFO L276 IsEmpty]: Start isEmpty. Operand 698 states and 840 transitions. [2022-07-13 17:58:16,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-07-13 17:58:16,685 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:16,685 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:16,705 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-13 17:58:16,905 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-07-13 17:58:16,905 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:16,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:16,906 INFO L85 PathProgramCache]: Analyzing trace with hash 1670948605, now seen corresponding path program 1 times [2022-07-13 17:58:16,906 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:16,906 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [223093117] [2022-07-13 17:58:16,909 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:16,909 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:16,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:58:17,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:58:17,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 17:58:17,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:17,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-13 17:58:17,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-07-13 17:58:17,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-07-13 17:58:17,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:17,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-07-13 17:58:17,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,070 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-13 17:58:17,070 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:17,070 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [223093117] [2022-07-13 17:58:17,070 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [223093117] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:58:17,071 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1449396399] [2022-07-13 17:58:17,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:17,071 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:17,071 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:17,085 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:58:17,117 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-13 17:58:17,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,180 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 11 conjunts are in the unsatisfiable core [2022-07-13 17:58:17,182 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:58:17,260 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:58:17,260 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 17:58:17,260 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1449396399] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:17,260 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 17:58:17,260 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 11 [2022-07-13 17:58:17,260 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [345458528] [2022-07-13 17:58:17,261 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:17,261 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:17,261 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:17,261 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:17,261 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-07-13 17:58:17,261 INFO L87 Difference]: Start difference. First operand 698 states and 840 transitions. Second operand has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-13 17:58:17,376 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:17,376 INFO L93 Difference]: Finished difference Result 1799 states and 2265 transitions. [2022-07-13 17:58:17,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 17:58:17,377 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 98 [2022-07-13 17:58:17,377 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:17,381 INFO L225 Difference]: With dead ends: 1799 [2022-07-13 17:58:17,381 INFO L226 Difference]: Without dead ends: 1264 [2022-07-13 17:58:17,383 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 112 SyntacticMatches, 3 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=52, Invalid=158, Unknown=0, NotChecked=0, Total=210 [2022-07-13 17:58:17,383 INFO L413 NwaCegarLoop]: 203 mSDtfsCounter, 180 mSDsluCounter, 570 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 773 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:17,384 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [183 Valid, 773 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:17,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1264 states. [2022-07-13 17:58:17,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1264 to 1050. [2022-07-13 17:58:17,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1050 states, 792 states have (on average 1.1944444444444444) internal successors, (946), 846 states have internal predecessors, (946), 134 states have call successors, (134), 116 states have call predecessors, (134), 123 states have return successors, (207), 129 states have call predecessors, (207), 134 states have call successors, (207) [2022-07-13 17:58:17,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1050 states to 1050 states and 1287 transitions. [2022-07-13 17:58:17,422 INFO L78 Accepts]: Start accepts. Automaton has 1050 states and 1287 transitions. Word has length 98 [2022-07-13 17:58:17,422 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:17,422 INFO L495 AbstractCegarLoop]: Abstraction has 1050 states and 1287 transitions. [2022-07-13 17:58:17,422 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-13 17:58:17,422 INFO L276 IsEmpty]: Start isEmpty. Operand 1050 states and 1287 transitions. [2022-07-13 17:58:17,424 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-07-13 17:58:17,424 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:17,424 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:17,443 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-13 17:58:17,644 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-13 17:58:17,644 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:17,645 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:17,645 INFO L85 PathProgramCache]: Analyzing trace with hash -134489729, now seen corresponding path program 1 times [2022-07-13 17:58:17,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:17,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1508678648] [2022-07-13 17:58:17,646 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:17,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:17,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:58:17,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:58:17,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 17:58:17,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:17,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-13 17:58:17,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-07-13 17:58:17,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-07-13 17:58:17,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:17,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-07-13 17:58:17,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,801 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-07-13 17:58:17,801 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:17,802 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1508678648] [2022-07-13 17:58:17,802 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1508678648] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:58:17,802 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [921773471] [2022-07-13 17:58:17,802 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:17,802 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:17,802 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:17,804 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:58:17,804 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-13 17:58:17,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:17,874 INFO L263 TraceCheckSpWp]: Trace formula consists of 473 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-13 17:58:17,876 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:58:17,924 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-13 17:58:17,924 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 17:58:17,924 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [921773471] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:17,924 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 17:58:17,924 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [11] total 14 [2022-07-13 17:58:17,925 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [74374094] [2022-07-13 17:58:17,925 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:17,925 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:58:17,925 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:17,926 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:58:17,926 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=30, Invalid=152, Unknown=0, NotChecked=0, Total=182 [2022-07-13 17:58:17,926 INFO L87 Difference]: Start difference. First operand 1050 states and 1287 transitions. Second operand has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-13 17:58:17,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:17,965 INFO L93 Difference]: Finished difference Result 1489 states and 1814 transitions. [2022-07-13 17:58:17,965 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 17:58:17,965 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-07-13 17:58:17,965 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:17,966 INFO L225 Difference]: With dead ends: 1489 [2022-07-13 17:58:17,966 INFO L226 Difference]: Without dead ends: 0 [2022-07-13 17:58:17,968 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=195, Unknown=0, NotChecked=0, Total=240 [2022-07-13 17:58:17,969 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 33 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 375 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:17,969 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 375 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:17,970 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-13 17:58:17,970 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-13 17:58:17,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 17:58:17,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-13 17:58:17,970 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 98 [2022-07-13 17:58:17,970 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:17,970 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 17:58:17,970 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-13 17:58:17,970 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-13 17:58:17,970 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-13 17:58:17,972 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-13 17:58:17,992 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-13 17:58:18,190 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:18,192 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-13 17:58:21,446 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 851 858) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2022-07-13 17:58:21,446 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 851 858) no Hoare annotation was computed. [2022-07-13 17:58:21,446 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 851 858) no Hoare annotation was computed. [2022-07-13 17:58:21,446 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 766 772) no Hoare annotation was computed. [2022-07-13 17:58:21,446 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 766 772) the Hoare annotation is: true [2022-07-13 17:58:21,447 INFO L899 garLoopResultBuilder]: For program point L190-1(lines 186 197) no Hoare annotation was computed. [2022-07-13 17:58:21,447 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 186 197) the Hoare annotation is: (let ((.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse3 (not (<= 1 |old(~methaneLevelCritical~0)|))) (or .cse0 .cse3 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-07-13 17:58:21,447 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 186 197) no Hoare annotation was computed. [2022-07-13 17:58:21,447 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 198 206) the Hoare annotation is: true [2022-07-13 17:58:21,447 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 198 206) no Hoare annotation was computed. [2022-07-13 17:58:21,447 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 198 206) no Hoare annotation was computed. [2022-07-13 17:58:21,447 INFO L895 garLoopResultBuilder]: At program point L271(line 271) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse12 (<= 1 ~waterLevel~0))) (let ((.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse0 (<= 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse12)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse11 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) .cse12 (= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~7#1|))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse4) (or .cse5 .cse0 .cse6 .cse4) (or .cse5 .cse7 .cse6 .cse8) (or .cse5 .cse7 .cse2 .cse8) (or .cse5 .cse9 .cse10 .cse6) (or .cse5 .cse9 .cse0 .cse10 .cse2) (or .cse5 .cse11 .cse10 .cse2 (not .cse3)) (or .cse9 .cse6 .cse1 .cse3 .cse4)))) [2022-07-13 17:58:21,448 INFO L899 garLoopResultBuilder]: For program point L271-1(line 271) no Hoare annotation was computed. [2022-07-13 17:58:21,448 INFO L899 garLoopResultBuilder]: For program point L746-1(lines 745 764) no Hoare annotation was computed. [2022-07-13 17:58:21,448 INFO L899 garLoopResultBuilder]: For program point L808(lines 808 816) no Hoare annotation was computed. [2022-07-13 17:58:21,448 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 742 765) no Hoare annotation was computed. [2022-07-13 17:58:21,448 INFO L899 garLoopResultBuilder]: For program point L804(lines 804 821) no Hoare annotation was computed. [2022-07-13 17:58:21,448 INFO L895 garLoopResultBuilder]: At program point L949(lines 934 952) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~10#1| 0))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse2 .cse4 .cse5) (or .cse3 .cse6 .cse4 .cse5) (or .cse0 .cse1 .cse6))) [2022-07-13 17:58:21,448 INFO L895 garLoopResultBuilder]: At program point L875(lines 870 878) the Hoare annotation is: (let ((.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse6 (= 0 ~systemActive~0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3 (<= 2 ~waterLevel~0)) .cse4) (or .cse5 .cse6 .cse4) (or (and .cse2 .cse3 (= ~waterLevel~0 1)) .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 .cse3 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse6 .cse4) (or .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse5))) [2022-07-13 17:58:21,448 INFO L899 garLoopResultBuilder]: For program point L277(lines 277 283) no Hoare annotation was computed. [2022-07-13 17:58:21,449 INFO L899 garLoopResultBuilder]: For program point L661(line 661) no Hoare annotation was computed. [2022-07-13 17:58:21,449 INFO L899 garLoopResultBuilder]: For program point L273(lines 273 286) no Hoare annotation was computed. [2022-07-13 17:58:21,449 INFO L895 garLoopResultBuilder]: At program point L273-1(lines 265 289) the Hoare annotation is: (let ((.cse17 (= 0 ~systemActive~0))) (let ((.cse6 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~1#1| 0)) (.cse8 (not .cse17)) (.cse19 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse20 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 2 ~waterLevel~0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse11 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse12 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse13 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|)) (.cse14 (<= 1 ~waterLevel~0)) (.cse15 (= |timeShift_isLowWaterLevel_~tmp~10#1| 0)) (.cse16 (<= 1 |timeShift_processEnvironment_~tmp~7#1|)) (.cse10 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse20 .cse7)) (.cse2 (not .cse20)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not .cse19)) (.cse18 (and .cse6 .cse19 .cse7 .cse8)) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4)) (or .cse0 .cse1 .cse5 (and .cse6 .cse3 .cse4)) (or .cse0 (and .cse6 .cse3 .cse7) .cse5 .cse8 .cse9) (or .cse10 .cse2 (and .cse11 .cse3 .cse12 .cse13 .cse14 .cse15 .cse16) .cse17 .cse9) (or (and .cse6 .cse11 .cse3 .cse12 .cse13 .cse14 .cse15 .cse16) .cse5 .cse17 .cse18 .cse9) (or .cse0 .cse10 .cse2 .cse9) (or .cse0 .cse5 .cse17 .cse18 .cse9))))) [2022-07-13 17:58:21,449 INFO L895 garLoopResultBuilder]: At program point L814(line 814) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2))) [2022-07-13 17:58:21,449 INFO L895 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~7#1|))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 1 |old(~waterLevel~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3) (or .cse5 .cse6 .cse1) (or .cse5 .cse6 .cse4))) [2022-07-13 17:58:21,449 INFO L899 garLoopResultBuilder]: For program point L166(lines 166 170) no Hoare annotation was computed. [2022-07-13 17:58:21,449 INFO L895 garLoopResultBuilder]: At program point L166-2(lines 162 173) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0) (or .cse6 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6))) [2022-07-13 17:58:21,450 INFO L895 garLoopResultBuilder]: At program point L662(lines 657 664) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2))) [2022-07-13 17:58:21,450 INFO L895 garLoopResultBuilder]: At program point L819(line 819) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0)) (.cse10 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse3 (and .cse10 (= ~waterLevel~0 1))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse10 (<= 2 ~waterLevel~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not .cse5))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse7 .cse3) (or .cse0 .cse8 .cse2 .cse9) (or .cse4 .cse7 .cse5 .cse6) (or .cse0 .cse8 .cse7 .cse9)))) [2022-07-13 17:58:21,450 INFO L895 garLoopResultBuilder]: At program point L819-1(lines 800 824) the Hoare annotation is: (let ((.cse12 (= ~pumpRunning~0 0)) (.cse13 (<= 1 ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse10 (= ~waterLevel~0 1)) (.cse0 (<= 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 |old(~waterLevel~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not .cse3)) (.cse11 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse12 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) .cse13 (= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~7#1|))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse4) (or .cse5 .cse0 .cse6 .cse4) (or .cse5 .cse7 .cse6 .cse8) (or .cse5 .cse9 .cse6 .cse10) (or .cse5 .cse9 .cse2 .cse10) (or .cse5 .cse11 .cse7 .cse6) (or .cse5 .cse11 .cse0 .cse7 .cse2) (or .cse5 .cse7 .cse2 .cse8) (or .cse11 .cse6 .cse1 .cse3 .cse4)))) [2022-07-13 17:58:21,450 INFO L899 garLoopResultBuilder]: For program point L753-1(lines 753 759) no Hoare annotation was computed. [2022-07-13 17:58:21,450 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 742 765) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse1 .cse3) (or .cse4 .cse5 .cse6 .cse3) (or .cse4 .cse7 .cse6 .cse8) (or .cse4 .cse9 .cse10 .cse6) (or .cse0 .cse6 .cse2 .cse3) (or .cse4 .cse7 .cse1 .cse8) (or .cse4 .cse9 .cse10 .cse1)))) [2022-07-13 17:58:21,450 INFO L899 garLoopResultBuilder]: For program point L943(lines 943 947) no Hoare annotation was computed. [2022-07-13 17:58:21,450 INFO L899 garLoopResultBuilder]: For program point L943-2(lines 943 947) no Hoare annotation was computed. [2022-07-13 17:58:21,450 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 742 765) no Hoare annotation was computed. [2022-07-13 17:58:21,451 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 661) no Hoare annotation was computed. [2022-07-13 17:58:21,451 INFO L895 garLoopResultBuilder]: At program point L258(lines 253 261) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6) (or .cse6 .cse3 .cse4 .cse5))) [2022-07-13 17:58:21,451 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-07-13 17:58:21,451 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-07-13 17:58:21,451 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-07-13 17:58:21,451 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-07-13 17:58:21,451 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-07-13 17:58:21,451 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-07-13 17:58:21,452 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-07-13 17:58:21,452 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-07-13 17:58:21,452 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-07-13 17:58:21,452 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-07-13 17:58:21,452 INFO L895 garLoopResultBuilder]: At program point L700(line 700) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse2 .cse5 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse4 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3))) [2022-07-13 17:58:21,452 INFO L895 garLoopResultBuilder]: At program point L725(lines 678 727) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse2 .cse5 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse4 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3))) [2022-07-13 17:58:21,452 INFO L899 garLoopResultBuilder]: For program point L688(lines 688 694) no Hoare annotation was computed. [2022-07-13 17:58:21,452 INFO L899 garLoopResultBuilder]: For program point L688-1(lines 688 694) no Hoare annotation was computed. [2022-07-13 17:58:21,452 INFO L895 garLoopResultBuilder]: At program point L973(lines 968 975) the Hoare annotation is: (let ((.cse3 (<= 2 ~waterLevel~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse7 .cse0 .cse1 .cse2 .cse4 (<= 1 ~waterLevel~0) .cse5) (and .cse7 .cse6 .cse1 .cse2 .cse4 (= ~waterLevel~0 1) .cse5))) [2022-07-13 17:58:21,453 INFO L899 garLoopResultBuilder]: For program point L680(lines 680 684) no Hoare annotation was computed. [2022-07-13 17:58:21,453 INFO L895 garLoopResultBuilder]: At program point L965(lines 953 967) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 2 ~waterLevel~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= ~waterLevel~0 1)) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0) .cse5))) [2022-07-13 17:58:21,453 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-13 17:58:21,453 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-13 17:58:21,453 INFO L899 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2022-07-13 17:58:21,453 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-13 17:58:21,453 INFO L899 garLoopResultBuilder]: For program point L957-1(lines 957 963) no Hoare annotation was computed. [2022-07-13 17:58:21,453 INFO L895 garLoopResultBuilder]: At program point L1007(lines 1002 1010) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:58:21,453 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-07-13 17:58:21,453 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-07-13 17:58:21,454 INFO L895 garLoopResultBuilder]: At program point L999(lines 995 1001) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:58:21,454 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-13 17:58:21,454 INFO L902 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-07-13 17:58:21,454 INFO L902 garLoopResultBuilder]: At program point L731(lines 668 735) the Hoare annotation is: true [2022-07-13 17:58:21,454 INFO L899 garLoopResultBuilder]: For program point L698(lines 698 704) no Hoare annotation was computed. [2022-07-13 17:58:21,454 INFO L899 garLoopResultBuilder]: For program point L698-1(lines 698 704) no Hoare annotation was computed. [2022-07-13 17:58:21,454 INFO L902 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-07-13 17:58:21,454 INFO L895 garLoopResultBuilder]: At program point L690(line 690) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse2 .cse5 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 .cse4 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)) (and .cse0 .cse4 .cse1 .cse2 .cse5 .cse3))) [2022-07-13 17:58:21,455 INFO L895 garLoopResultBuilder]: At program point L992(lines 988 994) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:58:21,455 INFO L895 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-07-13 17:58:21,455 INFO L895 garLoopResultBuilder]: At program point L728(lines 677 729) the Hoare annotation is: false [2022-07-13 17:58:21,455 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:58:21,455 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 722) no Hoare annotation was computed. [2022-07-13 17:58:21,455 INFO L895 garLoopResultBuilder]: At program point L716-2(lines 708 723) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (not (= 0 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0)) (and .cse1 .cse2 .cse3 .cse5 .cse4 .cse6) (and .cse7 .cse2 .cse3 .cse5 .cse4 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse4 (= ~waterLevel~0 1)) (and .cse0 .cse7 .cse2 .cse3 .cse5 .cse4))) [2022-07-13 17:58:21,455 INFO L899 garLoopResultBuilder]: For program point L679(lines 678 727) no Hoare annotation was computed. [2022-07-13 17:58:21,455 INFO L899 garLoopResultBuilder]: For program point L708(lines 708 723) no Hoare annotation was computed. [2022-07-13 17:58:21,456 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 774 798) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-07-13 17:58:21,456 INFO L895 garLoopResultBuilder]: At program point L830(lines 825 832) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-07-13 17:58:21,456 INFO L895 garLoopResultBuilder]: At program point L793(line 793) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-07-13 17:58:21,456 INFO L895 garLoopResultBuilder]: At program point L248(lines 239 252) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 (<= 2 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse5))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3 .cse4)))) [2022-07-13 17:58:21,456 INFO L899 garLoopResultBuilder]: For program point L793-1(lines 774 798) no Hoare annotation was computed. [2022-07-13 17:58:21,456 INFO L899 garLoopResultBuilder]: For program point L841(lines 841 847) no Hoare annotation was computed. [2022-07-13 17:58:21,456 INFO L895 garLoopResultBuilder]: At program point L841-2(lines 834 850) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~8#1|) (= ~pumpRunning~0 0) .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|))) (or .cse0 .cse1 .cse3 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-07-13 17:58:21,456 INFO L895 garLoopResultBuilder]: At program point L930(lines 915 933) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0))) (let ((.cse2 (and .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse5)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~waterLevel~0)) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse4 .cse2 .cse3) (or .cse0 .cse1 (not .cse5) .cse4 .cse3)))) [2022-07-13 17:58:21,457 INFO L895 garLoopResultBuilder]: At program point L866(lines 859 869) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) (and .cse2 .cse3) .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and .cse2 .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|))))) [2022-07-13 17:58:21,457 INFO L895 garLoopResultBuilder]: At program point L864(line 864) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3))) [2022-07-13 17:58:21,457 INFO L899 garLoopResultBuilder]: For program point L864-1(line 864) no Hoare annotation was computed. [2022-07-13 17:58:21,457 INFO L899 garLoopResultBuilder]: For program point L924(lines 924 928) no Hoare annotation was computed. [2022-07-13 17:58:21,457 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 774 798) no Hoare annotation was computed. [2022-07-13 17:58:21,457 INFO L899 garLoopResultBuilder]: For program point L924-2(lines 924 928) no Hoare annotation was computed. [2022-07-13 17:58:21,457 INFO L895 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-07-13 17:58:21,457 INFO L899 garLoopResultBuilder]: For program point L243(lines 243 249) no Hoare annotation was computed. [2022-07-13 17:58:21,457 INFO L899 garLoopResultBuilder]: For program point L782(lines 782 790) no Hoare annotation was computed. [2022-07-13 17:58:21,458 INFO L899 garLoopResultBuilder]: For program point L778(lines 778 795) no Hoare annotation was computed. [2022-07-13 17:58:21,458 INFO L899 garLoopResultBuilder]: For program point L178-1(lines 174 185) no Hoare annotation was computed. [2022-07-13 17:58:21,458 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 174 185) no Hoare annotation was computed. [2022-07-13 17:58:21,458 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 174 185) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse3 (= ~waterLevel~0 1)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse2 (= 0 ~systemActive~0) .cse6) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 .cse5 .cse2 .cse6))) [2022-07-13 17:58:21,460 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:21,461 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-13 17:58:21,483 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.07 05:58:21 BoogieIcfgContainer [2022-07-13 17:58:21,483 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-13 17:58:21,484 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-13 17:58:21,484 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-13 17:58:21,484 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-13 17:58:21,484 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:13" (3/4) ... [2022-07-13 17:58:21,486 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-13 17:58:21,490 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-13 17:58:21,490 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-13 17:58:21,490 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-13 17:58:21,490 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-13 17:58:21,490 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-13 17:58:21,490 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-13 17:58:21,491 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:58:21,491 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-13 17:58:21,496 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-07-13 17:58:21,496 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-13 17:58:21,497 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-13 17:58:21,497 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-13 17:58:21,497 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-13 17:58:21,498 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:58:21,498 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:58:21,518 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 17:58:21,519 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 17:58:21,519 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) [2022-07-13 17:58:21,520 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && (((!(methaneLevelCritical == 0) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:21,521 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((2 <= waterLevel || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel)) || 2 <= waterLevel) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-13 17:58:21,522 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || ((tmp == 0 && pumpRunning == 0) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || ((tmp == 0 && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((((((((tmp == 0 && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) [2022-07-13 17:58:21,522 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive)) [2022-07-13 17:58:21,522 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) [2022-07-13 17:58:21,522 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) [2022-07-13 17:58:21,522 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && 2 <= waterLevel)) || !(2 <= \old(waterLevel))) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && \result == 0) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && (((((((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:21,522 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(1 <= methaneLevelCritical) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(methaneLevelCritical == 0) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-13 17:58:21,523 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((methaneLevelCritical <= tmp && pumpRunning == 0) && 2 <= waterLevel) && methaneLevelCritical <= \result)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-13 17:58:21,523 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) [2022-07-13 17:58:21,523 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-07-13 17:58:21,523 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((!(1 <= methaneLevelCritical) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-13 17:58:21,523 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:21,524 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-13 17:58:21,557 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-13 17:58:21,557 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-13 17:58:21,557 INFO L158 Benchmark]: Toolchain (without parser) took 8702.46ms. Allocated memory was 123.7MB in the beginning and 234.9MB in the end (delta: 111.1MB). Free memory was 95.0MB in the beginning and 80.2MB in the end (delta: 14.8MB). Peak memory consumption was 126.4MB. Max. memory is 16.1GB. [2022-07-13 17:58:21,558 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 123.7MB. Free memory is still 77.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 17:58:21,558 INFO L158 Benchmark]: CACSL2BoogieTranslator took 314.78ms. Allocated memory is still 123.7MB. Free memory was 94.9MB in the beginning and 87.1MB in the end (delta: 7.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-07-13 17:58:21,558 INFO L158 Benchmark]: Boogie Procedure Inliner took 39.38ms. Allocated memory is still 123.7MB. Free memory was 87.1MB in the beginning and 84.7MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:58:21,559 INFO L158 Benchmark]: Boogie Preprocessor took 18.65ms. Allocated memory is still 123.7MB. Free memory was 84.7MB in the beginning and 83.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:58:21,559 INFO L158 Benchmark]: RCFGBuilder took 408.23ms. Allocated memory is still 123.7MB. Free memory was 82.9MB in the beginning and 65.9MB in the end (delta: 17.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-13 17:58:21,559 INFO L158 Benchmark]: TraceAbstraction took 7843.77ms. Allocated memory was 123.7MB in the beginning and 234.9MB in the end (delta: 111.1MB). Free memory was 65.4MB in the beginning and 86.5MB in the end (delta: -21.1MB). Peak memory consumption was 94.5MB. Max. memory is 16.1GB. [2022-07-13 17:58:21,560 INFO L158 Benchmark]: Witness Printer took 73.33ms. Allocated memory is still 234.9MB. Free memory was 86.5MB in the beginning and 80.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-13 17:58:21,561 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 123.7MB. Free memory is still 77.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 314.78ms. Allocated memory is still 123.7MB. Free memory was 94.9MB in the beginning and 87.1MB in the end (delta: 7.8MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 39.38ms. Allocated memory is still 123.7MB. Free memory was 87.1MB in the beginning and 84.7MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 18.65ms. Allocated memory is still 123.7MB. Free memory was 84.7MB in the beginning and 83.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 408.23ms. Allocated memory is still 123.7MB. Free memory was 82.9MB in the beginning and 65.9MB in the end (delta: 17.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 7843.77ms. Allocated memory was 123.7MB in the beginning and 234.9MB in the end (delta: 111.1MB). Free memory was 65.4MB in the beginning and 86.5MB in the end (delta: -21.1MB). Peak memory consumption was 94.5MB. Max. memory is 16.1GB. * Witness Printer took 73.33ms. Allocated memory is still 234.9MB. Free memory was 86.5MB in the beginning and 80.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 661]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.8s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 1.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1449 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1423 mSDsluCounter, 4224 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2754 mSDsCounter, 377 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1454 IncrementalHoareTripleChecker+Invalid, 1831 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 377 mSolverCounterUnsat, 1470 mSDtfsCounter, 1454 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 455 GetRequests, 352 SyntacticMatches, 4 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1050occurred in iteration=11, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 270 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 2151 PreInvPairs, 2357 NumberOfFragments, 2686 HoareAnnotationTreeSize, 2151 FomulaSimplifications, 336 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 46 FomulaSimplificationsInter, 8306 FormulaSimplificationTreeSizeReductionInter, 3.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 877 NumberOfCodeBlocks, 877 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 862 ConstructedInterpolants, 0 QuantifiedInterpolants, 1446 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1323 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 136/142 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1)) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) - InvariantResult [Line: 859]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 953]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 == systemActive) && waterLevel == 1)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive) - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && 2 <= waterLevel)) || !(2 <= \old(waterLevel))) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && \result == 0) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && (((((((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && (((!(methaneLevelCritical == 0) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(1 <= methaneLevelCritical) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(methaneLevelCritical == 0) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((methaneLevelCritical <= tmp && pumpRunning == 0) && 2 <= waterLevel) && methaneLevelCritical <= \result)) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 825]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 988]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: (((((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel == 1) && !(0 == systemActive)) - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((!(1 <= methaneLevelCritical) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || ((tmp == 0 && pumpRunning == 0) && waterLevel == 1))) && ((((!(\old(pumpRunning) == 0) || ((tmp == 0 && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((((((((tmp == 0 && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) - InvariantResult [Line: 800]: Loop Invariant Derived loop invariant: ((((((((((((2 <= waterLevel || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel)) || 2 <= waterLevel) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= waterLevel) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-07-13 17:58:21,615 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE