./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash faabc130c8aadbb7390121b68f1c41e161e50da9443e348cb1c3db1c45e9e0cb --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-13 17:58:37,726 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-13 17:58:37,727 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-13 17:58:37,754 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-13 17:58:37,755 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-13 17:58:37,756 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-13 17:58:37,757 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-13 17:58:37,758 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-13 17:58:37,760 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-13 17:58:37,760 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-13 17:58:37,761 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-13 17:58:37,762 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-13 17:58:37,763 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-13 17:58:37,763 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-13 17:58:37,764 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-13 17:58:37,766 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-13 17:58:37,766 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-13 17:58:37,767 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-13 17:58:37,769 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-13 17:58:37,771 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-13 17:58:37,772 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-13 17:58:37,773 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-13 17:58:37,774 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-13 17:58:37,775 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-13 17:58:37,776 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-13 17:58:37,779 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-13 17:58:37,779 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-13 17:58:37,779 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-13 17:58:37,780 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-13 17:58:37,780 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-13 17:58:37,781 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-13 17:58:37,782 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-13 17:58:37,782 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-13 17:58:37,783 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-13 17:58:37,785 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-13 17:58:37,786 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-13 17:58:37,788 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-13 17:58:37,789 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-13 17:58:37,789 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-13 17:58:37,789 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-13 17:58:37,790 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-13 17:58:37,791 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-13 17:58:37,793 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-13 17:58:37,817 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-13 17:58:37,817 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-13 17:58:37,817 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-13 17:58:37,817 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-13 17:58:37,818 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-13 17:58:37,818 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-13 17:58:37,819 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-13 17:58:37,819 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-13 17:58:37,819 INFO L138 SettingsManager]: * Use SBE=true [2022-07-13 17:58:37,820 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-13 17:58:37,820 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-13 17:58:37,820 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-13 17:58:37,820 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-13 17:58:37,820 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-13 17:58:37,821 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-13 17:58:37,821 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-13 17:58:37,821 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-13 17:58:37,821 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-13 17:58:37,821 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-13 17:58:37,822 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-13 17:58:37,822 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-13 17:58:37,822 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-13 17:58:37,822 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-13 17:58:37,822 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-13 17:58:37,823 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:58:37,823 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-13 17:58:37,823 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-13 17:58:37,823 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-13 17:58:37,824 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-13 17:58:37,824 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-13 17:58:37,824 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-13 17:58:37,824 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-13 17:58:37,824 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-13 17:58:37,825 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> faabc130c8aadbb7390121b68f1c41e161e50da9443e348cb1c3db1c45e9e0cb [2022-07-13 17:58:38,063 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-13 17:58:38,084 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-13 17:58:38,086 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-13 17:58:38,087 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-13 17:58:38,088 INFO L275 PluginConnector]: CDTParser initialized [2022-07-13 17:58:38,089 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c [2022-07-13 17:58:38,151 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b715fdea6/ba906bc1949c4c03957c2d2a65fdfdad/FLAGa9654ac94 [2022-07-13 17:58:38,596 INFO L306 CDTParser]: Found 1 translation units. [2022-07-13 17:58:38,597 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c [2022-07-13 17:58:38,614 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b715fdea6/ba906bc1949c4c03957c2d2a65fdfdad/FLAGa9654ac94 [2022-07-13 17:58:38,632 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b715fdea6/ba906bc1949c4c03957c2d2a65fdfdad [2022-07-13 17:58:38,635 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-13 17:58:38,637 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-13 17:58:38,638 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-13 17:58:38,638 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-13 17:58:38,640 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-13 17:58:38,641 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:58:38" (1/1) ... [2022-07-13 17:58:38,642 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@16c9fdc8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:38, skipping insertion in model container [2022-07-13 17:58:38,642 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:58:38" (1/1) ... [2022-07-13 17:58:38,648 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-13 17:58:38,693 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-13 17:58:38,944 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-07-13 17:58:39,032 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:58:39,048 INFO L203 MainTranslator]: Completed pre-run [2022-07-13 17:58:39,081 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product39.cil.c[5087,5100] [2022-07-13 17:58:39,133 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:58:39,152 INFO L208 MainTranslator]: Completed translation [2022-07-13 17:58:39,152 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:39 WrapperNode [2022-07-13 17:58:39,153 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-13 17:58:39,154 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-13 17:58:39,154 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-13 17:58:39,154 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-13 17:58:39,160 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:39" (1/1) ... [2022-07-13 17:58:39,181 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:39" (1/1) ... [2022-07-13 17:58:39,221 INFO L137 Inliner]: procedures = 55, calls = 156, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 250 [2022-07-13 17:58:39,222 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-13 17:58:39,223 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-13 17:58:39,223 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-13 17:58:39,223 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-13 17:58:39,231 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:39" (1/1) ... [2022-07-13 17:58:39,231 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:39" (1/1) ... [2022-07-13 17:58:39,234 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:39" (1/1) ... [2022-07-13 17:58:39,234 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:39" (1/1) ... [2022-07-13 17:58:39,239 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:39" (1/1) ... [2022-07-13 17:58:39,247 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:39" (1/1) ... [2022-07-13 17:58:39,249 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:39" (1/1) ... [2022-07-13 17:58:39,251 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-13 17:58:39,252 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-13 17:58:39,261 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-13 17:58:39,261 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-13 17:58:39,262 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:39" (1/1) ... [2022-07-13 17:58:39,269 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:58:39,279 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:39,297 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-13 17:58:39,322 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-13 17:58:39,339 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-13 17:58:39,340 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-13 17:58:39,340 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-13 17:58:39,340 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-13 17:58:39,340 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-13 17:58:39,340 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-13 17:58:39,341 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-13 17:58:39,341 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-13 17:58:39,341 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-13 17:58:39,341 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:58:39,341 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:58:39,341 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-13 17:58:39,341 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-13 17:58:39,342 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-13 17:58:39,342 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-13 17:58:39,342 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-13 17:58:39,342 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-13 17:58:39,342 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-13 17:58:39,342 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-13 17:58:39,342 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-13 17:58:39,419 INFO L234 CfgBuilder]: Building ICFG [2022-07-13 17:58:39,421 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-13 17:58:39,690 INFO L275 CfgBuilder]: Performing block encoding [2022-07-13 17:58:39,695 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-13 17:58:39,699 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-13 17:58:39,701 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:39 BoogieIcfgContainer [2022-07-13 17:58:39,701 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-13 17:58:39,704 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-13 17:58:39,706 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-13 17:58:39,709 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-13 17:58:39,710 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.07 05:58:38" (1/3) ... [2022-07-13 17:58:39,711 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7dc36c71 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:58:39, skipping insertion in model container [2022-07-13 17:58:39,711 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:39" (2/3) ... [2022-07-13 17:58:39,711 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7dc36c71 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:58:39, skipping insertion in model container [2022-07-13 17:58:39,712 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:39" (3/3) ... [2022-07-13 17:58:39,713 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product39.cil.c [2022-07-13 17:58:39,728 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-13 17:58:39,729 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-13 17:58:39,769 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-13 17:58:39,775 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@45b9d928, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@48004443 [2022-07-13 17:58:39,775 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-13 17:58:39,779 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 70 states have (on average 1.3857142857142857) internal successors, (97), 79 states have internal predecessors, (97), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-13 17:58:39,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-13 17:58:39,789 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:39,790 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:39,791 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:39,796 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:39,797 INFO L85 PathProgramCache]: Analyzing trace with hash 238573202, now seen corresponding path program 1 times [2022-07-13 17:58:39,805 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:39,806 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1265993704] [2022-07-13 17:58:39,806 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:39,807 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:39,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:40,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 17:58:40,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:40,058 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:40,059 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:40,059 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1265993704] [2022-07-13 17:58:40,060 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1265993704] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:40,060 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:40,061 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-13 17:58:40,062 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [918508078] [2022-07-13 17:58:40,062 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:40,067 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-13 17:58:40,067 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:40,095 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-13 17:58:40,096 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:58:40,099 INFO L87 Difference]: Start difference. First operand has 94 states, 70 states have (on average 1.3857142857142857) internal successors, (97), 79 states have internal predecessors, (97), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:40,147 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:40,147 INFO L93 Difference]: Finished difference Result 179 states and 244 transitions. [2022-07-13 17:58:40,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-13 17:58:40,150 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-13 17:58:40,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:40,163 INFO L225 Difference]: With dead ends: 179 [2022-07-13 17:58:40,163 INFO L226 Difference]: Without dead ends: 85 [2022-07-13 17:58:40,168 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:58:40,171 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:40,172 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:40,186 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-07-13 17:58:40,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-07-13 17:58:40,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-07-13 17:58:40,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-07-13 17:58:40,224 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2022-07-13 17:58:40,224 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:40,224 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-07-13 17:58:40,225 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:40,225 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-07-13 17:58:40,228 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-13 17:58:40,229 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:40,229 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:40,229 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-13 17:58:40,230 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:40,232 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:40,232 INFO L85 PathProgramCache]: Analyzing trace with hash -1313382680, now seen corresponding path program 1 times [2022-07-13 17:58:40,232 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:40,232 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2123709956] [2022-07-13 17:58:40,233 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:40,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:40,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:40,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-13 17:58:40,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:40,336 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:40,338 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:40,339 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2123709956] [2022-07-13 17:58:40,340 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2123709956] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:40,340 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:40,340 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 17:58:40,340 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1961236284] [2022-07-13 17:58:40,340 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:40,342 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:58:40,342 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:40,343 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:58:40,343 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:40,343 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:40,361 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:40,361 INFO L93 Difference]: Finished difference Result 131 states and 169 transitions. [2022-07-13 17:58:40,362 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:58:40,362 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-13 17:58:40,362 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:40,363 INFO L225 Difference]: With dead ends: 131 [2022-07-13 17:58:40,363 INFO L226 Difference]: Without dead ends: 76 [2022-07-13 17:58:40,364 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:40,365 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 16 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:40,366 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 173 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:40,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-07-13 17:58:40,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-07-13 17:58:40,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 65 states have internal predecessors, (76), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-13 17:58:40,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2022-07-13 17:58:40,375 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 26 [2022-07-13 17:58:40,375 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:40,375 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2022-07-13 17:58:40,375 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:40,376 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2022-07-13 17:58:40,376 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-07-13 17:58:40,377 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:40,378 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:40,378 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-13 17:58:40,378 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:40,379 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:40,379 INFO L85 PathProgramCache]: Analyzing trace with hash 418656316, now seen corresponding path program 1 times [2022-07-13 17:58:40,379 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:40,379 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1270417875] [2022-07-13 17:58:40,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:40,380 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:40,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:40,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:58:40,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:40,433 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:40,433 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:40,433 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1270417875] [2022-07-13 17:58:40,433 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1270417875] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:40,434 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:40,435 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 17:58:40,435 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [63977727] [2022-07-13 17:58:40,435 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:40,436 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:58:40,436 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:40,436 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:58:40,437 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:40,437 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:40,467 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:40,472 INFO L93 Difference]: Finished difference Result 211 states and 278 transitions. [2022-07-13 17:58:40,472 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:58:40,473 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-07-13 17:58:40,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:40,477 INFO L225 Difference]: With dead ends: 211 [2022-07-13 17:58:40,477 INFO L226 Difference]: Without dead ends: 143 [2022-07-13 17:58:40,480 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:40,483 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 77 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:40,485 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 208 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:40,486 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2022-07-13 17:58:40,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 140. [2022-07-13 17:58:40,509 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 140 states, 103 states have (on average 1.3592233009708738) internal successors, (140), 118 states have internal predecessors, (140), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-07-13 17:58:40,510 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140 states to 140 states and 184 transitions. [2022-07-13 17:58:40,513 INFO L78 Accepts]: Start accepts. Automaton has 140 states and 184 transitions. Word has length 30 [2022-07-13 17:58:40,513 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:40,513 INFO L495 AbstractCegarLoop]: Abstraction has 140 states and 184 transitions. [2022-07-13 17:58:40,513 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:40,514 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 184 transitions. [2022-07-13 17:58:40,515 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-07-13 17:58:40,517 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:40,517 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:40,517 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-13 17:58:40,518 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:40,518 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:40,519 INFO L85 PathProgramCache]: Analyzing trace with hash -1768755130, now seen corresponding path program 1 times [2022-07-13 17:58:40,519 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:40,519 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2072453879] [2022-07-13 17:58:40,519 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:40,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:40,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:40,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:58:40,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:40,599 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:40,599 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:40,599 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2072453879] [2022-07-13 17:58:40,600 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2072453879] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:40,600 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:40,600 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:40,600 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1484170385] [2022-07-13 17:58:40,600 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:40,601 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:40,601 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:40,602 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:40,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:40,602 INFO L87 Difference]: Start difference. First operand 140 states and 184 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:40,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:40,740 INFO L93 Difference]: Finished difference Result 402 states and 537 transitions. [2022-07-13 17:58:40,741 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:58:40,741 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-07-13 17:58:40,741 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:40,752 INFO L225 Difference]: With dead ends: 402 [2022-07-13 17:58:40,752 INFO L226 Difference]: Without dead ends: 270 [2022-07-13 17:58:40,754 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-07-13 17:58:40,761 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 66 mSDsluCounter, 372 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 478 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:40,762 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 478 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:40,764 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2022-07-13 17:58:40,796 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 264. [2022-07-13 17:58:40,796 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 191 states have (on average 1.3455497382198953) internal successors, (257), 220 states have internal predecessors, (257), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) [2022-07-13 17:58:40,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 347 transitions. [2022-07-13 17:58:40,798 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 347 transitions. Word has length 34 [2022-07-13 17:58:40,798 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:40,799 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 347 transitions. [2022-07-13 17:58:40,799 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:40,799 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 347 transitions. [2022-07-13 17:58:40,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-07-13 17:58:40,801 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:40,801 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:40,801 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-13 17:58:40,801 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:40,802 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:40,802 INFO L85 PathProgramCache]: Analyzing trace with hash 1795843330, now seen corresponding path program 1 times [2022-07-13 17:58:40,802 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:40,802 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [79089873] [2022-07-13 17:58:40,802 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:40,802 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:40,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:40,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-13 17:58:40,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:40,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 17:58:40,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:40,857 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:40,858 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:40,858 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [79089873] [2022-07-13 17:58:40,858 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [79089873] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:40,858 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:40,858 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:40,858 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [277142413] [2022-07-13 17:58:40,858 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:40,858 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:40,859 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:40,859 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:40,859 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:40,863 INFO L87 Difference]: Start difference. First operand 264 states and 347 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 17:58:41,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:41,139 INFO L93 Difference]: Finished difference Result 692 states and 928 transitions. [2022-07-13 17:58:41,139 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:58:41,139 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-07-13 17:58:41,141 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:41,146 INFO L225 Difference]: With dead ends: 692 [2022-07-13 17:58:41,146 INFO L226 Difference]: Without dead ends: 436 [2022-07-13 17:58:41,147 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-13 17:58:41,150 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 111 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 247 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 199 SdHoareTripleChecker+Invalid, 286 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 247 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:41,150 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [117 Valid, 199 Invalid, 286 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 247 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:58:41,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 436 states. [2022-07-13 17:58:41,181 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 436 to 422. [2022-07-13 17:58:41,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 422 states, 309 states have (on average 1.2977346278317152) internal successors, (401), 338 states have internal predecessors, (401), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) [2022-07-13 17:58:41,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 422 states to 422 states and 541 transitions. [2022-07-13 17:58:41,184 INFO L78 Accepts]: Start accepts. Automaton has 422 states and 541 transitions. Word has length 38 [2022-07-13 17:58:41,185 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:41,185 INFO L495 AbstractCegarLoop]: Abstraction has 422 states and 541 transitions. [2022-07-13 17:58:41,185 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-13 17:58:41,185 INFO L276 IsEmpty]: Start isEmpty. Operand 422 states and 541 transitions. [2022-07-13 17:58:41,187 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-07-13 17:58:41,187 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:41,187 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:41,187 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-13 17:58:41,188 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:41,188 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:41,188 INFO L85 PathProgramCache]: Analyzing trace with hash -1327873931, now seen corresponding path program 1 times [2022-07-13 17:58:41,188 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:41,189 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1321460703] [2022-07-13 17:58:41,189 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:41,189 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:41,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:41,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-13 17:58:41,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:41,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:58:41,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:41,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-13 17:58:41,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:41,266 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:41,266 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:41,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1321460703] [2022-07-13 17:58:41,267 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1321460703] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:41,267 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:41,267 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 17:58:41,267 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1016696504] [2022-07-13 17:58:41,267 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:41,268 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 17:58:41,268 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:41,268 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 17:58:41,268 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:58:41,269 INFO L87 Difference]: Start difference. First operand 422 states and 541 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:58:41,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:41,552 INFO L93 Difference]: Finished difference Result 944 states and 1225 transitions. [2022-07-13 17:58:41,553 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 17:58:41,553 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-07-13 17:58:41,553 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:41,557 INFO L225 Difference]: With dead ends: 944 [2022-07-13 17:58:41,557 INFO L226 Difference]: Without dead ends: 530 [2022-07-13 17:58:41,559 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-13 17:58:41,560 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 119 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 292 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 217 SdHoareTripleChecker+Invalid, 340 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 292 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:41,561 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 217 Invalid, 340 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 292 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:58:41,563 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 530 states. [2022-07-13 17:58:41,602 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 530 to 516. [2022-07-13 17:58:41,604 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 516 states, 383 states have (on average 1.2610966057441253) internal successors, (483), 412 states have internal predecessors, (483), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-07-13 17:58:41,609 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 516 states to 516 states and 651 transitions. [2022-07-13 17:58:41,609 INFO L78 Accepts]: Start accepts. Automaton has 516 states and 651 transitions. Word has length 48 [2022-07-13 17:58:41,610 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:41,610 INFO L495 AbstractCegarLoop]: Abstraction has 516 states and 651 transitions. [2022-07-13 17:58:41,610 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:58:41,611 INFO L276 IsEmpty]: Start isEmpty. Operand 516 states and 651 transitions. [2022-07-13 17:58:41,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-07-13 17:58:41,615 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:41,615 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:41,615 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-13 17:58:41,615 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:41,616 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:41,616 INFO L85 PathProgramCache]: Analyzing trace with hash 1278149623, now seen corresponding path program 1 times [2022-07-13 17:58:41,616 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:41,616 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [10683321] [2022-07-13 17:58:41,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:41,616 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:41,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:41,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-13 17:58:41,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:41,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:58:41,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:41,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-13 17:58:41,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:41,700 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:41,700 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:41,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [10683321] [2022-07-13 17:58:41,700 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [10683321] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:41,700 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:41,701 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:41,701 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1788558778] [2022-07-13 17:58:41,701 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:41,701 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:41,701 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:41,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:41,702 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:41,702 INFO L87 Difference]: Start difference. First operand 516 states and 651 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:58:41,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:41,948 INFO L93 Difference]: Finished difference Result 1058 states and 1371 transitions. [2022-07-13 17:58:41,948 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:58:41,948 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-07-13 17:58:41,950 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:41,952 INFO L225 Difference]: With dead ends: 1058 [2022-07-13 17:58:41,953 INFO L226 Difference]: Without dead ends: 550 [2022-07-13 17:58:41,954 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-07-13 17:58:41,956 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 122 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 123 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:41,956 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [123 Valid, 190 Invalid, 262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:58:41,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 550 states. [2022-07-13 17:58:41,991 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 550 to 524. [2022-07-13 17:58:41,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 524 states, 391 states have (on average 1.2557544757033248) internal successors, (491), 420 states have internal predecessors, (491), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-07-13 17:58:41,995 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 524 states to 524 states and 659 transitions. [2022-07-13 17:58:41,996 INFO L78 Accepts]: Start accepts. Automaton has 524 states and 659 transitions. Word has length 48 [2022-07-13 17:58:41,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:41,998 INFO L495 AbstractCegarLoop]: Abstraction has 524 states and 659 transitions. [2022-07-13 17:58:41,998 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:58:42,001 INFO L276 IsEmpty]: Start isEmpty. Operand 524 states and 659 transitions. [2022-07-13 17:58:42,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-07-13 17:58:42,002 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:42,003 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:42,003 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-13 17:58:42,004 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:42,004 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:42,004 INFO L85 PathProgramCache]: Analyzing trace with hash 1700851449, now seen corresponding path program 1 times [2022-07-13 17:58:42,004 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:42,007 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112771786] [2022-07-13 17:58:42,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:42,008 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:42,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:42,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-13 17:58:42,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:42,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:58:42,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:42,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-13 17:58:42,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:42,062 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:42,062 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:42,063 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112771786] [2022-07-13 17:58:42,063 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112771786] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:42,063 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:42,063 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:42,063 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [223980512] [2022-07-13 17:58:42,063 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:42,064 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:42,064 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:42,064 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:42,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:42,065 INFO L87 Difference]: Start difference. First operand 524 states and 659 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:58:42,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:42,392 INFO L93 Difference]: Finished difference Result 1526 states and 1999 transitions. [2022-07-13 17:58:42,392 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-07-13 17:58:42,393 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-07-13 17:58:42,393 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:42,398 INFO L225 Difference]: With dead ends: 1526 [2022-07-13 17:58:42,398 INFO L226 Difference]: Without dead ends: 1010 [2022-07-13 17:58:42,400 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-07-13 17:58:42,401 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 315 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 270 mSolverCounterSat, 125 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 318 SdHoareTripleChecker+Valid, 252 SdHoareTripleChecker+Invalid, 395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 125 IncrementalHoareTripleChecker+Valid, 270 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:42,401 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [318 Valid, 252 Invalid, 395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [125 Valid, 270 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:58:42,402 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1010 states. [2022-07-13 17:58:42,458 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1010 to 998. [2022-07-13 17:58:42,460 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 998 states, 745 states have (on average 1.225503355704698) internal successors, (913), 792 states have internal predecessors, (913), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) [2022-07-13 17:58:42,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 998 states to 998 states and 1259 transitions. [2022-07-13 17:58:42,465 INFO L78 Accepts]: Start accepts. Automaton has 998 states and 1259 transitions. Word has length 48 [2022-07-13 17:58:42,465 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:42,465 INFO L495 AbstractCegarLoop]: Abstraction has 998 states and 1259 transitions. [2022-07-13 17:58:42,465 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:58:42,465 INFO L276 IsEmpty]: Start isEmpty. Operand 998 states and 1259 transitions. [2022-07-13 17:58:42,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-13 17:58:42,467 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:42,467 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:42,467 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-13 17:58:42,467 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:42,468 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:42,468 INFO L85 PathProgramCache]: Analyzing trace with hash -938154221, now seen corresponding path program 1 times [2022-07-13 17:58:42,468 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:42,468 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [507955039] [2022-07-13 17:58:42,468 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:42,469 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:42,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:42,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 17:58:42,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:42,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-13 17:58:42,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:42,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 17:58:42,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:42,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-07-13 17:58:42,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:42,524 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:42,524 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:42,525 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [507955039] [2022-07-13 17:58:42,525 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [507955039] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:42,525 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:42,525 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:42,525 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [63542444] [2022-07-13 17:58:42,525 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:42,526 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:42,526 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:42,526 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:42,526 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:42,526 INFO L87 Difference]: Start difference. First operand 998 states and 1259 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-13 17:58:42,980 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:42,981 INFO L93 Difference]: Finished difference Result 1972 states and 2635 transitions. [2022-07-13 17:58:42,981 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-13 17:58:42,981 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 52 [2022-07-13 17:58:42,982 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:42,992 INFO L225 Difference]: With dead ends: 1972 [2022-07-13 17:58:42,992 INFO L226 Difference]: Without dead ends: 1970 [2022-07-13 17:58:42,994 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-07-13 17:58:42,994 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 427 mSDsluCounter, 91 mSDsCounter, 0 mSdLazyCounter, 259 mSolverCounterSat, 230 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 429 SdHoareTripleChecker+Valid, 185 SdHoareTripleChecker+Invalid, 489 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 230 IncrementalHoareTripleChecker+Valid, 259 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:42,995 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [429 Valid, 185 Invalid, 489 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [230 Valid, 259 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-13 17:58:42,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1970 states. [2022-07-13 17:58:43,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1970 to 1533. [2022-07-13 17:58:43,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1533 states, 1138 states have (on average 1.2293497363796133) internal successors, (1399), 1228 states have internal predecessors, (1399), 211 states have call successors, (211), 151 states have call predecessors, (211), 183 states have return successors, (428), 204 states have call predecessors, (428), 211 states have call successors, (428) [2022-07-13 17:58:43,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1533 states to 1533 states and 2038 transitions. [2022-07-13 17:58:43,087 INFO L78 Accepts]: Start accepts. Automaton has 1533 states and 2038 transitions. Word has length 52 [2022-07-13 17:58:43,087 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:43,088 INFO L495 AbstractCegarLoop]: Abstraction has 1533 states and 2038 transitions. [2022-07-13 17:58:43,088 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-13 17:58:43,088 INFO L276 IsEmpty]: Start isEmpty. Operand 1533 states and 2038 transitions. [2022-07-13 17:58:43,092 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2022-07-13 17:58:43,092 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:43,092 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:43,092 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-13 17:58:43,093 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:43,093 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:43,093 INFO L85 PathProgramCache]: Analyzing trace with hash -1573279230, now seen corresponding path program 1 times [2022-07-13 17:58:43,093 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:43,093 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [291086829] [2022-07-13 17:58:43,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:43,094 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:43,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 17:58:43,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-13 17:58:43,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 17:58:43,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 17:58:43,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-13 17:58:43,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-07-13 17:58:43,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,161 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:58:43,161 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:43,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [291086829] [2022-07-13 17:58:43,162 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [291086829] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:43,162 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:43,162 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-13 17:58:43,162 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1922159065] [2022-07-13 17:58:43,162 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:43,163 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-13 17:58:43,163 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:43,163 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-13 17:58:43,163 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-07-13 17:58:43,164 INFO L87 Difference]: Start difference. First operand 1533 states and 2038 transitions. Second operand has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-07-13 17:58:43,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:43,554 INFO L93 Difference]: Finished difference Result 1800 states and 2379 transitions. [2022-07-13 17:58:43,554 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-07-13 17:58:43,555 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 82 [2022-07-13 17:58:43,556 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:43,559 INFO L225 Difference]: With dead ends: 1800 [2022-07-13 17:58:43,559 INFO L226 Difference]: Without dead ends: 769 [2022-07-13 17:58:43,563 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=86, Invalid=220, Unknown=0, NotChecked=0, Total=306 [2022-07-13 17:58:43,564 INFO L413 NwaCegarLoop]: 123 mSDtfsCounter, 295 mSDsluCounter, 186 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 110 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 304 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 457 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 110 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:43,565 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [304 Valid, 309 Invalid, 457 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [110 Valid, 347 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-13 17:58:43,566 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 769 states. [2022-07-13 17:58:43,600 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 769 to 740. [2022-07-13 17:58:43,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 740 states, 552 states have (on average 1.193840579710145) internal successors, (659), 591 states have internal predecessors, (659), 98 states have call successors, (98), 72 states have call predecessors, (98), 89 states have return successors, (204), 99 states have call predecessors, (204), 98 states have call successors, (204) [2022-07-13 17:58:43,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 740 states to 740 states and 961 transitions. [2022-07-13 17:58:43,605 INFO L78 Accepts]: Start accepts. Automaton has 740 states and 961 transitions. Word has length 82 [2022-07-13 17:58:43,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:43,606 INFO L495 AbstractCegarLoop]: Abstraction has 740 states and 961 transitions. [2022-07-13 17:58:43,606 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (7), 6 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-07-13 17:58:43,606 INFO L276 IsEmpty]: Start isEmpty. Operand 740 states and 961 transitions. [2022-07-13 17:58:43,608 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-07-13 17:58:43,608 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:43,608 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:43,608 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-13 17:58:43,609 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:43,609 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:43,609 INFO L85 PathProgramCache]: Analyzing trace with hash 750648094, now seen corresponding path program 1 times [2022-07-13 17:58:43,609 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:43,610 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [78359531] [2022-07-13 17:58:43,610 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:43,610 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:43,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 17:58:43,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-13 17:58:43,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:58:43,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 17:58:43,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-13 17:58:43,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-07-13 17:58:43,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-07-13 17:58:43,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,693 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 11 proven. 13 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-13 17:58:43,694 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:43,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [78359531] [2022-07-13 17:58:43,694 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [78359531] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:58:43,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [102875383] [2022-07-13 17:58:43,694 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:43,694 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:43,695 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:43,699 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:58:43,708 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-13 17:58:43,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:43,810 INFO L263 TraceCheckSpWp]: Trace formula consists of 466 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-13 17:58:43,816 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:58:43,896 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:43,896 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 17:58:43,897 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [102875383] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:43,897 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 17:58:43,897 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2022-07-13 17:58:43,897 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2125218286] [2022-07-13 17:58:43,897 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:43,898 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:58:43,898 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:43,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:58:43,899 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-07-13 17:58:43,899 INFO L87 Difference]: Start difference. First operand 740 states and 961 transitions. Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-07-13 17:58:43,954 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:43,955 INFO L93 Difference]: Finished difference Result 1278 states and 1694 transitions. [2022-07-13 17:58:43,955 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:58:43,956 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 90 [2022-07-13 17:58:43,956 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:43,959 INFO L225 Difference]: With dead ends: 1278 [2022-07-13 17:58:43,959 INFO L226 Difference]: Without dead ends: 640 [2022-07-13 17:58:43,962 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 102 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-07-13 17:58:43,962 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 38 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:43,963 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 191 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:43,964 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 640 states. [2022-07-13 17:58:44,005 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 640 to 640. [2022-07-13 17:58:44,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 640 states, 476 states have (on average 1.1680672268907564) internal successors, (556), 510 states have internal predecessors, (556), 85 states have call successors, (85), 67 states have call predecessors, (85), 78 states have return successors, (129), 85 states have call predecessors, (129), 85 states have call successors, (129) [2022-07-13 17:58:44,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 640 states to 640 states and 770 transitions. [2022-07-13 17:58:44,009 INFO L78 Accepts]: Start accepts. Automaton has 640 states and 770 transitions. Word has length 90 [2022-07-13 17:58:44,010 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:44,010 INFO L495 AbstractCegarLoop]: Abstraction has 640 states and 770 transitions. [2022-07-13 17:58:44,010 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-07-13 17:58:44,010 INFO L276 IsEmpty]: Start isEmpty. Operand 640 states and 770 transitions. [2022-07-13 17:58:44,011 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 96 [2022-07-13 17:58:44,012 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:44,012 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:44,039 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-13 17:58:44,231 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-13 17:58:44,231 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:44,232 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:44,232 INFO L85 PathProgramCache]: Analyzing trace with hash -1881348981, now seen corresponding path program 1 times [2022-07-13 17:58:44,232 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:44,232 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1669667215] [2022-07-13 17:58:44,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:44,232 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:44,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:44,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 17:58:44,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:44,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-13 17:58:44,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:44,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:58:44,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:44,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 17:58:44,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:44,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-13 17:58:44,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:44,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-07-13 17:58:44,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:44,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-07-13 17:58:44,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:44,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:44,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:44,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-07-13 17:58:44,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:44,346 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-13 17:58:44,347 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:44,347 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1669667215] [2022-07-13 17:58:44,347 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1669667215] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:58:44,347 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1368216280] [2022-07-13 17:58:44,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:44,348 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:44,348 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:44,349 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:58:44,373 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-13 17:58:44,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:44,446 INFO L263 TraceCheckSpWp]: Trace formula consists of 469 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-13 17:58:44,449 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:58:44,601 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-07-13 17:58:44,601 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 17:58:44,601 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1368216280] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:44,601 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 17:58:44,601 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2022-07-13 17:58:44,602 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1244813965] [2022-07-13 17:58:44,602 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:44,603 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 17:58:44,603 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:44,603 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 17:58:44,603 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2022-07-13 17:58:44,604 INFO L87 Difference]: Start difference. First operand 640 states and 770 transitions. Second operand has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-13 17:58:44,714 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:44,714 INFO L93 Difference]: Finished difference Result 1163 states and 1392 transitions. [2022-07-13 17:58:44,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:58:44,715 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 95 [2022-07-13 17:58:44,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:44,716 INFO L225 Difference]: With dead ends: 1163 [2022-07-13 17:58:44,716 INFO L226 Difference]: Without dead ends: 0 [2022-07-13 17:58:44,718 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 103 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2022-07-13 17:58:44,719 INFO L413 NwaCegarLoop]: 159 mSDtfsCounter, 45 mSDsluCounter, 585 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 744 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:44,719 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 744 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:44,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-13 17:58:44,720 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-13 17:58:44,720 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 17:58:44,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-13 17:58:44,721 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 95 [2022-07-13 17:58:44,721 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:44,721 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 17:58:44,721 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.428571428571429) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2022-07-13 17:58:44,721 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-13 17:58:44,721 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-13 17:58:44,724 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-13 17:58:44,749 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-13 17:58:44,943 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-13 17:58:44,945 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-13 17:58:49,515 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 469 476) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (= 1 ~systemActive~0))) (or .cse0 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-07-13 17:58:49,515 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 469 476) no Hoare annotation was computed. [2022-07-13 17:58:49,515 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 469 476) no Hoare annotation was computed. [2022-07-13 17:58:49,515 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 402 408) no Hoare annotation was computed. [2022-07-13 17:58:49,516 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 402 408) the Hoare annotation is: true [2022-07-13 17:58:49,516 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse6 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse6) (or .cse5 .cse2 .cse4 (not (= 0 ~systemActive~0))))) [2022-07-13 17:58:49,516 INFO L899 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2022-07-13 17:58:49,516 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2022-07-13 17:58:49,517 INFO L899 garLoopResultBuilder]: For program point L382-1(lines 381 400) no Hoare annotation was computed. [2022-07-13 17:58:49,517 INFO L899 garLoopResultBuilder]: For program point L444(lines 444 452) no Hoare annotation was computed. [2022-07-13 17:58:49,517 INFO L899 garLoopResultBuilder]: For program point L440(lines 440 457) no Hoare annotation was computed. [2022-07-13 17:58:49,517 INFO L899 garLoopResultBuilder]: For program point L279(lines 279 285) no Hoare annotation was computed. [2022-07-13 17:58:49,518 INFO L899 garLoopResultBuilder]: For program point L300(line 300) no Hoare annotation was computed. [2022-07-13 17:58:49,518 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 378 401) no Hoare annotation was computed. [2022-07-13 17:58:49,518 INFO L895 garLoopResultBuilder]: At program point L482(line 482) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-07-13 17:58:49,518 INFO L899 garLoopResultBuilder]: For program point L482-1(line 482) no Hoare annotation was computed. [2022-07-13 17:58:49,518 INFO L895 garLoopResultBuilder]: At program point L272(line 272) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and .cse11 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse11 (<= 1 |timeShift_isMethaneAlarm_#res#1|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse0 .cse1 .cse2 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse8 .cse7) (or .cse0 .cse7 (not (= 0 ~systemActive~0))) (or .cse2 .cse9 .cse8 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse2 .cse9 .cse6) (or .cse1 .cse2 .cse9 .cse8 .cse10)))) [2022-07-13 17:58:49,518 INFO L899 garLoopResultBuilder]: For program point L272-1(line 272) no Hoare annotation was computed. [2022-07-13 17:58:49,518 INFO L895 garLoopResultBuilder]: At program point L301(lines 296 303) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse5) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-07-13 17:58:49,519 INFO L895 garLoopResultBuilder]: At program point L450(line 450) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-07-13 17:58:49,519 INFO L895 garLoopResultBuilder]: At program point L446(line 446) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse9 (= 1 ~systemActive~0))) (let ((.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse6 (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse8 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse9)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not .cse9)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not .cse8)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse6 .cse2 .cse5 .cse7) (or .cse0 .cse1 .cse2 .cse7) (or .cse4 .cse1 .cse2 .cse5 .cse3) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-07-13 17:58:49,519 INFO L895 garLoopResultBuilder]: At program point L455(line 455) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4) (or .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse1 .cse3 .cse6) (or .cse5 .cse0 .cse1 .cse4 .cse6) (or .cse5 (not (= 0 ~systemActive~0))))) [2022-07-13 17:58:49,519 INFO L895 garLoopResultBuilder]: At program point L455-1(lines 436 460) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse7 (and .cse11 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse11 (<= 1 |timeShift_isMethaneAlarm_#res#1|))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 .cse7) (or .cse0 .cse1 .cse2 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse8 .cse7) (or .cse2 .cse9 .cse8 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse2 .cse9 .cse6) (or .cse1 .cse2 .cse9 .cse8 .cse10) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-07-13 17:58:49,520 INFO L895 garLoopResultBuilder]: At program point L484(lines 477 487) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 .cse3 (and .cse4 (= ~methAndRunningLastTime~0 0) .cse7)) (or .cse2 .cse5 .cse3 (and .cse4 .cse7) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-07-13 17:58:49,520 INFO L899 garLoopResultBuilder]: For program point L389-1(lines 389 395) no Hoare annotation was computed. [2022-07-13 17:58:49,520 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-07-13 17:58:49,520 INFO L895 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-07-13 17:58:49,520 INFO L899 garLoopResultBuilder]: For program point L278(lines 278 288) no Hoare annotation was computed. [2022-07-13 17:58:49,520 INFO L899 garLoopResultBuilder]: For program point L274(lines 274 291) no Hoare annotation was computed. [2022-07-13 17:58:49,520 INFO L895 garLoopResultBuilder]: At program point L274-1(lines 266 294) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse10 (= ~methAndRunningLastTime~0 0)) (.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse2 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse12 (<= 1 ~pumpRunning~0)) (.cse13 (<= 2 ~waterLevel~0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse5 (not .cse14)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not .cse15)) (.cse8 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse9 .cse10 .cse15 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse14))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 (and .cse9 .cse10 .cse11) .cse2) (or (and .cse12 .cse10 .cse13 .cse11 .cse3) .cse0 .cse4 .cse5 (and .cse9 .cse10 .cse11 .cse3) .cse1) (or .cse0 .cse4 .cse5 (and .cse12 .cse13 .cse11) .cse7 (and .cse9 .cse10 .cse14 .cse11)) (or .cse5 .cse6 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse10 .cse3) (and .cse9 .cse10 .cse3)) (or .cse5 .cse6 .cse7 .cse8 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-07-13 17:58:49,521 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 378 401) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) .cse8 .cse9)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8 .cse9))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse3 .cse6) (or .cse5 .cse6 (not (= 0 ~systemActive~0))) (or .cse5 .cse0 .cse1 .cse7 .cse6) (or .cse1 .cse2 .cse4 .cse7) (or .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-07-13 17:58:49,521 INFO L895 garLoopResultBuilder]: At program point L493(lines 488 496) the Hoare annotation is: (let ((.cse12 (= 1 ~systemActive~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (and .cse10 .cse11 .cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (.cse8 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse12)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse10 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse11 .cse12))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse5) .cse6 .cse7) (or .cse3 .cse7 .cse8) (or .cse0 .cse1 .cse6 .cse9 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse2 .cse8) (or .cse3 .cse4 .cse0 .cse2) (or .cse4 .cse0 .cse1 .cse6 .cse9)))) [2022-07-13 17:58:49,521 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 378 401) no Hoare annotation was computed. [2022-07-13 17:58:49,521 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 300) no Hoare annotation was computed. [2022-07-13 17:58:49,521 INFO L902 garLoopResultBuilder]: At program point L163-2(lines 163 177) the Hoare annotation is: true [2022-07-13 17:58:49,521 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 153 182) no Hoare annotation was computed. [2022-07-13 17:58:49,522 INFO L902 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: true [2022-07-13 17:58:49,522 INFO L899 garLoopResultBuilder]: For program point L159-1(line 159) no Hoare annotation was computed. [2022-07-13 17:58:49,522 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 153 182) the Hoare annotation is: true [2022-07-13 17:58:49,522 INFO L902 garLoopResultBuilder]: At program point L178(lines 153 182) the Hoare annotation is: true [2022-07-13 17:58:49,522 INFO L899 garLoopResultBuilder]: For program point L174(line 174) no Hoare annotation was computed. [2022-07-13 17:58:49,522 INFO L899 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2022-07-13 17:58:49,522 INFO L902 garLoopResultBuilder]: At program point L167-1(lines 167 171) the Hoare annotation is: true [2022-07-13 17:58:49,523 INFO L899 garLoopResultBuilder]: For program point L164(line 164) no Hoare annotation was computed. [2022-07-13 17:58:49,523 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 95 103) the Hoare annotation is: true [2022-07-13 17:58:49,523 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 95 103) no Hoare annotation was computed. [2022-07-13 17:58:49,523 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2022-07-13 17:58:49,523 INFO L902 garLoopResultBuilder]: At program point L225(lines 217 227) the Hoare annotation is: true [2022-07-13 17:58:49,523 INFO L902 garLoopResultBuilder]: At program point L250(lines 231 253) the Hoare annotation is: true [2022-07-13 17:58:49,523 INFO L895 garLoopResultBuilder]: At program point L564(lines 552 566) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0)) [2022-07-13 17:58:49,524 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 562) no Hoare annotation was computed. [2022-07-13 17:58:49,524 INFO L899 garLoopResultBuilder]: For program point L556-1(lines 556 562) no Hoare annotation was computed. [2022-07-13 17:58:49,524 INFO L895 garLoopResultBuilder]: At program point L263(lines 258 265) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:49,524 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-13 17:58:49,524 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-13 17:58:49,524 INFO L899 garLoopResultBuilder]: For program point L317(lines 316 363) no Hoare annotation was computed. [2022-07-13 17:58:49,524 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-13 17:58:49,524 INFO L899 garLoopResultBuilder]: For program point L346(lines 346 359) no Hoare annotation was computed. [2022-07-13 17:58:49,525 INFO L895 garLoopResultBuilder]: At program point L598(lines 593 601) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:49,525 INFO L895 garLoopResultBuilder]: At program point L338(line 338) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2022-07-13 17:58:49,525 INFO L902 garLoopResultBuilder]: At program point L367(lines 306 371) the Hoare annotation is: true [2022-07-13 17:58:49,525 INFO L895 garLoopResultBuilder]: At program point L590(lines 586 592) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:49,525 INFO L899 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-07-13 17:58:49,525 INFO L899 garLoopResultBuilder]: For program point L326-1(lines 326 332) no Hoare annotation was computed. [2022-07-13 17:58:49,525 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-13 17:58:49,526 INFO L899 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-07-13 17:58:49,526 INFO L895 garLoopResultBuilder]: At program point L558(line 558) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2022-07-13 17:58:49,526 INFO L895 garLoopResultBuilder]: At program point L364(lines 315 365) the Hoare annotation is: false [2022-07-13 17:58:49,526 INFO L895 garLoopResultBuilder]: At program point L583(lines 579 585) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:49,526 INFO L899 garLoopResultBuilder]: For program point L352(lines 352 358) no Hoare annotation was computed. [2022-07-13 17:58:49,526 INFO L895 garLoopResultBuilder]: At program point L352-2(lines 346 359) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse1 .cse2 .cse3) (and .cse5 .cse4 .cse6 .cse2 .cse3) (and .cse5 .cse3 (= 0 ~systemActive~0)) (and .cse0 .cse6 .cse2 .cse3))) [2022-07-13 17:58:49,526 INFO L895 garLoopResultBuilder]: At program point L212(lines 208 214) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:49,527 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 248) no Hoare annotation was computed. [2022-07-13 17:58:49,527 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-07-13 17:58:49,527 INFO L899 garLoopResultBuilder]: For program point L336-1(lines 336 342) no Hoare annotation was computed. [2022-07-13 17:58:49,527 INFO L899 garLoopResultBuilder]: For program point L241-2(lines 241 248) no Hoare annotation was computed. [2022-07-13 17:58:49,527 INFO L895 garLoopResultBuilder]: At program point L361(lines 316 363) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2022-07-13 17:58:49,527 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse1 .cse2 .cse3) (and .cse6 .cse4 .cse5 .cse2 .cse3) (and .cse6 .cse4 .cse3 (= 0 ~systemActive~0)))) [2022-07-13 17:58:49,528 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 410 434) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-07-13 17:58:49,528 INFO L895 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 .cse1 .cse4) (or .cse2 .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-07-13 17:58:49,528 INFO L895 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse3 .cse0 .cse1))) [2022-07-13 17:58:49,528 INFO L895 garLoopResultBuilder]: At program point L548(lines 533 551) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse4 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3 .cse4) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-07-13 17:58:49,528 INFO L899 garLoopResultBuilder]: For program point L418(lines 418 426) no Hoare annotation was computed. [2022-07-13 17:58:49,528 INFO L899 garLoopResultBuilder]: For program point L414(lines 414 431) no Hoare annotation was computed. [2022-07-13 17:58:49,528 INFO L899 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2022-07-13 17:58:49,529 INFO L899 garLoopResultBuilder]: For program point L542-2(lines 542 546) no Hoare annotation was computed. [2022-07-13 17:58:49,529 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 410 434) no Hoare annotation was computed. [2022-07-13 17:58:49,529 INFO L895 garLoopResultBuilder]: At program point L466(lines 461 468) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse3 .cse0 .cse1))) [2022-07-13 17:58:49,529 INFO L895 garLoopResultBuilder]: At program point L429(line 429) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-07-13 17:58:49,529 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-07-13 17:58:49,529 INFO L899 garLoopResultBuilder]: For program point L429-1(lines 410 434) no Hoare annotation was computed. [2022-07-13 17:58:49,529 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2022-07-13 17:58:49,530 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2022-07-13 17:58:49,530 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse0 .cse1 .cse3 .cse5) (or .cse4 .cse3 .cse5 (not (= 0 ~systemActive~0))) (or .cse0 .cse6 .cse2 .cse3 .cse5) (or .cse4 .cse0 .cse6 .cse3 .cse5))) [2022-07-13 17:58:49,533 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:49,534 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-13 17:58:49,559 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.07 05:58:49 BoogieIcfgContainer [2022-07-13 17:58:49,559 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-13 17:58:49,560 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-13 17:58:49,560 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-13 17:58:49,560 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-13 17:58:49,561 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:39" (3/4) ... [2022-07-13 17:58:49,563 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-13 17:58:49,568 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-13 17:58:49,568 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-13 17:58:49,568 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-13 17:58:49,568 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-13 17:58:49,569 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-13 17:58:49,569 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-13 17:58:49,569 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:58:49,569 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-13 17:58:49,575 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-07-13 17:58:49,576 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-13 17:58:49,576 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-13 17:58:49,577 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-13 17:58:49,577 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-13 17:58:49,578 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:58:49,578 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:58:49,598 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-07-13 17:58:49,599 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && pumpRunning == 0) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && pumpRunning == 0) && 1 <= \result))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-07-13 17:58:49,599 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || tmp == 0) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) || !(2 <= \old(waterLevel))) [2022-07-13 17:58:49,600 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-07-13 17:58:49,600 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0) && 1 == systemActive)) [2022-07-13 17:58:49,600 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-07-13 17:58:49,601 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-07-13 17:58:49,601 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(methAndRunningLastTime == 0)) [2022-07-13 17:58:49,601 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:49,621 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-13 17:58:49,621 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-13 17:58:49,622 INFO L158 Benchmark]: Toolchain (without parser) took 10985.20ms. Allocated memory was 98.6MB in the beginning and 182.5MB in the end (delta: 83.9MB). Free memory was 64.0MB in the beginning and 132.0MB in the end (delta: -68.0MB). Peak memory consumption was 15.8MB. Max. memory is 16.1GB. [2022-07-13 17:58:49,622 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 98.6MB. Free memory was 52.5MB in the beginning and 52.4MB in the end (delta: 84.0kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 17:58:49,622 INFO L158 Benchmark]: CACSL2BoogieTranslator took 515.25ms. Allocated memory is still 98.6MB. Free memory was 63.7MB in the beginning and 64.0MB in the end (delta: -220.5kB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-13 17:58:49,622 INFO L158 Benchmark]: Boogie Procedure Inliner took 68.21ms. Allocated memory is still 98.6MB. Free memory was 64.0MB in the beginning and 61.6MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:58:49,623 INFO L158 Benchmark]: Boogie Preprocessor took 28.68ms. Allocated memory is still 98.6MB. Free memory was 61.6MB in the beginning and 59.8MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:58:49,623 INFO L158 Benchmark]: RCFGBuilder took 450.66ms. Allocated memory was 98.6MB in the beginning and 125.8MB in the end (delta: 27.3MB). Free memory was 59.8MB in the beginning and 97.2MB in the end (delta: -37.4MB). Peak memory consumption was 17.7MB. Max. memory is 16.1GB. [2022-07-13 17:58:49,623 INFO L158 Benchmark]: TraceAbstraction took 9854.78ms. Allocated memory was 125.8MB in the beginning and 182.5MB in the end (delta: 56.6MB). Free memory was 96.4MB in the beginning and 137.3MB in the end (delta: -40.9MB). Peak memory consumption was 107.9MB. Max. memory is 16.1GB. [2022-07-13 17:58:49,624 INFO L158 Benchmark]: Witness Printer took 61.36ms. Allocated memory is still 182.5MB. Free memory was 137.3MB in the beginning and 132.0MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-07-13 17:58:49,625 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 98.6MB. Free memory was 52.5MB in the beginning and 52.4MB in the end (delta: 84.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 515.25ms. Allocated memory is still 98.6MB. Free memory was 63.7MB in the beginning and 64.0MB in the end (delta: -220.5kB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 68.21ms. Allocated memory is still 98.6MB. Free memory was 64.0MB in the beginning and 61.6MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 28.68ms. Allocated memory is still 98.6MB. Free memory was 61.6MB in the beginning and 59.8MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 450.66ms. Allocated memory was 98.6MB in the beginning and 125.8MB in the end (delta: 27.3MB). Free memory was 59.8MB in the beginning and 97.2MB in the end (delta: -37.4MB). Peak memory consumption was 17.7MB. Max. memory is 16.1GB. * TraceAbstraction took 9854.78ms. Allocated memory was 125.8MB in the beginning and 182.5MB in the end (delta: 56.6MB). Free memory was 96.4MB in the beginning and 137.3MB in the end (delta: -40.9MB). Peak memory consumption was 107.9MB. Max. memory is 16.1GB. * Witness Printer took 61.36ms. Allocated memory is still 182.5MB. Free memory was 137.3MB in the beginning and 132.0MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 300]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.8s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1661 SdHoareTripleChecker+Valid, 1.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1631 mSDsluCounter, 3265 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1922 mSDsCounter, 609 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1753 IncrementalHoareTripleChecker+Invalid, 2362 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 609 mSolverCounterUnsat, 1343 mSDtfsCounter, 1753 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 381 GetRequests, 282 SyntacticMatches, 2 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 139 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1533occurred in iteration=9, InterpolantAutomatonStates: 89, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 541 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 2171 PreInvPairs, 2420 NumberOfFragments, 2652 HoareAnnotationTreeSize, 2171 FomulaSimplifications, 938 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 43 FomulaSimplificationsInter, 17222 FormulaSimplificationTreeSizeReductionInter, 4.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 801 NumberOfCodeBlocks, 801 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 787 ConstructedInterpolants, 0 QuantifiedInterpolants, 1489 SizeOfPredicates, 5 NumberOfNonLiveVariables, 935 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 14 InterpolantComputations, 12 PerfectInterpolantSequences, 141/157 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 231]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 217]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 533]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && pumpRunning == 0) && 1 <= \result) && \result == 0) && 1 == systemActive)) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) || tmp == 0) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 436]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && pumpRunning == 0) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && pumpRunning == 0) && 1 <= \result))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 593]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-07-13 17:58:49,671 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE