./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8ebbbe9395fd7f6497497f0e6f84282075bb296e20acc9821d0fb2d7075b331d --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-13 17:58:43,674 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-13 17:58:43,676 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-13 17:58:43,701 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-13 17:58:43,702 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-13 17:58:43,703 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-13 17:58:43,703 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-13 17:58:43,705 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-13 17:58:43,706 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-13 17:58:43,706 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-13 17:58:43,707 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-13 17:58:43,708 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-13 17:58:43,708 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-13 17:58:43,708 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-13 17:58:43,709 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-13 17:58:43,710 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-13 17:58:43,710 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-13 17:58:43,714 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-13 17:58:43,716 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-13 17:58:43,717 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-13 17:58:43,721 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-13 17:58:43,725 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-13 17:58:43,725 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-13 17:58:43,726 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-13 17:58:43,727 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-13 17:58:43,728 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-13 17:58:43,731 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-13 17:58:43,731 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-13 17:58:43,732 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-13 17:58:43,732 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-13 17:58:43,734 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-13 17:58:43,734 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-13 17:58:43,735 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-13 17:58:43,735 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-13 17:58:43,736 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-13 17:58:43,737 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-13 17:58:43,737 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-13 17:58:43,738 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-13 17:58:43,738 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-13 17:58:43,738 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-13 17:58:43,738 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-13 17:58:43,739 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-13 17:58:43,741 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-13 17:58:43,768 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-13 17:58:43,769 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-13 17:58:43,769 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-13 17:58:43,769 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-13 17:58:43,770 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-13 17:58:43,770 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-13 17:58:43,771 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-13 17:58:43,771 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-13 17:58:43,771 INFO L138 SettingsManager]: * Use SBE=true [2022-07-13 17:58:43,772 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-13 17:58:43,772 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-13 17:58:43,772 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-13 17:58:43,772 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-13 17:58:43,772 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-13 17:58:43,773 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-13 17:58:43,773 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-13 17:58:43,773 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-13 17:58:43,773 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-13 17:58:43,773 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-13 17:58:43,773 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-13 17:58:43,773 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-13 17:58:43,774 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-13 17:58:43,774 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-13 17:58:43,774 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-13 17:58:43,774 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:58:43,774 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-13 17:58:43,774 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-13 17:58:43,774 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-13 17:58:43,775 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-13 17:58:43,775 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-13 17:58:43,775 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-13 17:58:43,775 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-13 17:58:43,775 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-13 17:58:43,775 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8ebbbe9395fd7f6497497f0e6f84282075bb296e20acc9821d0fb2d7075b331d [2022-07-13 17:58:43,986 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-13 17:58:43,999 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-13 17:58:44,001 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-13 17:58:44,002 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-13 17:58:44,003 INFO L275 PluginConnector]: CDTParser initialized [2022-07-13 17:58:44,004 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c [2022-07-13 17:58:44,056 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0984ab392/465a833297af4db4a6a9478b2f5a7aee/FLAGa3692ef33 [2022-07-13 17:58:44,419 INFO L306 CDTParser]: Found 1 translation units. [2022-07-13 17:58:44,419 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c [2022-07-13 17:58:44,427 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0984ab392/465a833297af4db4a6a9478b2f5a7aee/FLAGa3692ef33 [2022-07-13 17:58:44,828 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0984ab392/465a833297af4db4a6a9478b2f5a7aee [2022-07-13 17:58:44,830 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-13 17:58:44,831 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-13 17:58:44,832 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-13 17:58:44,832 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-13 17:58:44,838 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-13 17:58:44,838 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:58:44" (1/1) ... [2022-07-13 17:58:44,839 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1b77e175 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:44, skipping insertion in model container [2022-07-13 17:58:44,839 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:58:44" (1/1) ... [2022-07-13 17:58:44,843 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-13 17:58:44,884 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-13 17:58:45,161 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c[18359,18372] [2022-07-13 17:58:45,168 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:58:45,177 INFO L203 MainTranslator]: Completed pre-run [2022-07-13 17:58:45,247 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product49.cil.c[18359,18372] [2022-07-13 17:58:45,257 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:58:45,269 INFO L208 MainTranslator]: Completed translation [2022-07-13 17:58:45,270 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:45 WrapperNode [2022-07-13 17:58:45,271 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-13 17:58:45,272 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-13 17:58:45,272 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-13 17:58:45,272 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-13 17:58:45,277 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:45" (1/1) ... [2022-07-13 17:58:45,297 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:45" (1/1) ... [2022-07-13 17:58:45,331 INFO L137 Inliner]: procedures = 56, calls = 155, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 259 [2022-07-13 17:58:45,354 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-13 17:58:45,355 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-13 17:58:45,355 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-13 17:58:45,355 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-13 17:58:45,361 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:45" (1/1) ... [2022-07-13 17:58:45,373 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:45" (1/1) ... [2022-07-13 17:58:45,375 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:45" (1/1) ... [2022-07-13 17:58:45,375 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:45" (1/1) ... [2022-07-13 17:58:45,379 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:45" (1/1) ... [2022-07-13 17:58:45,382 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:45" (1/1) ... [2022-07-13 17:58:45,405 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:45" (1/1) ... [2022-07-13 17:58:45,413 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-13 17:58:45,414 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-13 17:58:45,414 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-13 17:58:45,414 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-13 17:58:45,415 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:45" (1/1) ... [2022-07-13 17:58:45,426 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:58:45,445 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:45,471 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-13 17:58:45,477 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-13 17:58:45,502 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-13 17:58:45,502 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-13 17:58:45,502 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-13 17:58:45,502 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-13 17:58:45,502 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-13 17:58:45,503 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-13 17:58:45,503 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-13 17:58:45,503 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-13 17:58:45,503 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-13 17:58:45,503 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:58:45,503 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:58:45,503 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-13 17:58:45,503 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-13 17:58:45,504 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-13 17:58:45,504 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-13 17:58:45,504 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-13 17:58:45,504 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-13 17:58:45,504 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-13 17:58:45,551 INFO L234 CfgBuilder]: Building ICFG [2022-07-13 17:58:45,552 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-13 17:58:45,763 INFO L275 CfgBuilder]: Performing block encoding [2022-07-13 17:58:45,768 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-13 17:58:45,768 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-13 17:58:45,769 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:45 BoogieIcfgContainer [2022-07-13 17:58:45,770 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-13 17:58:45,771 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-13 17:58:45,771 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-13 17:58:45,777 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-13 17:58:45,777 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.07 05:58:44" (1/3) ... [2022-07-13 17:58:45,778 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33f990a9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:58:45, skipping insertion in model container [2022-07-13 17:58:45,778 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:58:45" (2/3) ... [2022-07-13 17:58:45,778 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33f990a9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:58:45, skipping insertion in model container [2022-07-13 17:58:45,778 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:45" (3/3) ... [2022-07-13 17:58:45,779 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product49.cil.c [2022-07-13 17:58:45,789 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-13 17:58:45,789 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-13 17:58:45,820 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-13 17:58:45,824 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@30e7d26c, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@1f34d4cf [2022-07-13 17:58:45,824 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-13 17:58:45,827 INFO L276 IsEmpty]: Start isEmpty. Operand has 88 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 76 states have internal predecessors, (95), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-13 17:58:45,833 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-13 17:58:45,833 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:45,833 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:45,834 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:45,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:45,837 INFO L85 PathProgramCache]: Analyzing trace with hash -1277571174, now seen corresponding path program 1 times [2022-07-13 17:58:45,843 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:45,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [599960157] [2022-07-13 17:58:45,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:45,844 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:46,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 17:58:46,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,062 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:46,062 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:46,062 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [599960157] [2022-07-13 17:58:46,065 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [599960157] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:46,065 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:46,065 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-13 17:58:46,066 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [505795935] [2022-07-13 17:58:46,067 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:46,069 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-13 17:58:46,070 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:46,087 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-13 17:58:46,087 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:58:46,089 INFO L87 Difference]: Start difference. First operand has 88 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 76 states have internal predecessors, (95), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:46,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:46,123 INFO L93 Difference]: Finished difference Result 167 states and 228 transitions. [2022-07-13 17:58:46,124 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-13 17:58:46,125 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-13 17:58:46,125 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:46,133 INFO L225 Difference]: With dead ends: 167 [2022-07-13 17:58:46,133 INFO L226 Difference]: Without dead ends: 79 [2022-07-13 17:58:46,136 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:58:46,143 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:46,145 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:46,156 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-07-13 17:58:46,186 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 79. [2022-07-13 17:58:46,188 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 68 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-07-13 17:58:46,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 102 transitions. [2022-07-13 17:58:46,197 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 102 transitions. Word has length 25 [2022-07-13 17:58:46,197 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:46,197 INFO L495 AbstractCegarLoop]: Abstraction has 79 states and 102 transitions. [2022-07-13 17:58:46,198 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:46,198 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 102 transitions. [2022-07-13 17:58:46,200 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-13 17:58:46,201 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:46,201 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:46,201 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-13 17:58:46,202 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:46,203 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:46,203 INFO L85 PathProgramCache]: Analyzing trace with hash -941221246, now seen corresponding path program 1 times [2022-07-13 17:58:46,203 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:46,204 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2068969108] [2022-07-13 17:58:46,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:46,204 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:46,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-07-13 17:58:46,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,308 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:46,309 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:46,309 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2068969108] [2022-07-13 17:58:46,310 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2068969108] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:46,310 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:46,310 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 17:58:46,310 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [252623079] [2022-07-13 17:58:46,310 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:46,311 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:58:46,312 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:46,312 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:58:46,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:46,313 INFO L87 Difference]: Start difference. First operand 79 states and 102 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:46,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:46,330 INFO L93 Difference]: Finished difference Result 123 states and 159 transitions. [2022-07-13 17:58:46,331 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:58:46,332 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-13 17:58:46,333 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:46,334 INFO L225 Difference]: With dead ends: 123 [2022-07-13 17:58:46,335 INFO L226 Difference]: Without dead ends: 70 [2022-07-13 17:58:46,336 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:58:46,337 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 12 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 162 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:46,339 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 162 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:46,340 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-07-13 17:58:46,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-07-13 17:58:46,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 55 states have (on average 1.3454545454545455) internal successors, (74), 62 states have internal predecessors, (74), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-07-13 17:58:46,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 90 transitions. [2022-07-13 17:58:46,351 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 90 transitions. Word has length 26 [2022-07-13 17:58:46,352 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:46,352 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 90 transitions. [2022-07-13 17:58:46,353 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:46,353 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 90 transitions. [2022-07-13 17:58:46,354 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-07-13 17:58:46,354 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:46,354 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:46,354 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-13 17:58:46,355 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:46,355 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:46,356 INFO L85 PathProgramCache]: Analyzing trace with hash -913943674, now seen corresponding path program 1 times [2022-07-13 17:58:46,356 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:46,356 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1098515290] [2022-07-13 17:58:46,356 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:46,357 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:46,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:58:46,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,467 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:46,468 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:46,468 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1098515290] [2022-07-13 17:58:46,468 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1098515290] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:46,468 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:46,468 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:46,468 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1738369298] [2022-07-13 17:58:46,469 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:46,469 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:46,469 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:46,469 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:46,469 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:46,470 INFO L87 Difference]: Start difference. First operand 70 states and 90 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:46,544 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:46,545 INFO L93 Difference]: Finished difference Result 132 states and 173 transitions. [2022-07-13 17:58:46,545 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 17:58:46,545 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-07-13 17:58:46,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:46,546 INFO L225 Difference]: With dead ends: 132 [2022-07-13 17:58:46,546 INFO L226 Difference]: Without dead ends: 70 [2022-07-13 17:58:46,547 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-13 17:58:46,548 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 176 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 37 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 176 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 37 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:46,548 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [176 Valid, 189 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 37 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:46,548 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-07-13 17:58:46,553 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-07-13 17:58:46,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 55 states have (on average 1.3272727272727274) internal successors, (73), 62 states have internal predecessors, (73), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-07-13 17:58:46,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 89 transitions. [2022-07-13 17:58:46,554 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 89 transitions. Word has length 30 [2022-07-13 17:58:46,554 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:46,554 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 89 transitions. [2022-07-13 17:58:46,554 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:58:46,554 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 89 transitions. [2022-07-13 17:58:46,555 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-07-13 17:58:46,555 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:46,555 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:46,555 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-13 17:58:46,556 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:46,556 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:46,556 INFO L85 PathProgramCache]: Analyzing trace with hash 1798308510, now seen corresponding path program 1 times [2022-07-13 17:58:46,556 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:46,556 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1393876137] [2022-07-13 17:58:46,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:46,557 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:46,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:58:46,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:46,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-13 17:58:46,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,622 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:46,623 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:46,623 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1393876137] [2022-07-13 17:58:46,623 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1393876137] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:46,623 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:46,623 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:58:46,623 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [439762537] [2022-07-13 17:58:46,623 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:46,624 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:58:46,624 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:46,624 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:58:46,624 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:58:46,625 INFO L87 Difference]: Start difference. First operand 70 states and 89 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-13 17:58:46,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:46,728 INFO L93 Difference]: Finished difference Result 206 states and 264 transitions. [2022-07-13 17:58:46,729 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:58:46,729 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 40 [2022-07-13 17:58:46,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:46,733 INFO L225 Difference]: With dead ends: 206 [2022-07-13 17:58:46,733 INFO L226 Difference]: Without dead ends: 144 [2022-07-13 17:58:46,735 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-07-13 17:58:46,735 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 167 mSDsluCounter, 169 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 300 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:46,736 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 300 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:46,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 144 states. [2022-07-13 17:58:46,746 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 144 to 138. [2022-07-13 17:58:46,746 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 138 states, 107 states have (on average 1.2897196261682242) internal successors, (138), 114 states have internal predecessors, (138), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2022-07-13 17:58:46,747 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 138 states to 138 states and 171 transitions. [2022-07-13 17:58:46,747 INFO L78 Accepts]: Start accepts. Automaton has 138 states and 171 transitions. Word has length 40 [2022-07-13 17:58:46,747 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:46,747 INFO L495 AbstractCegarLoop]: Abstraction has 138 states and 171 transitions. [2022-07-13 17:58:46,747 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-13 17:58:46,748 INFO L276 IsEmpty]: Start isEmpty. Operand 138 states and 171 transitions. [2022-07-13 17:58:46,748 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-13 17:58:46,748 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:46,748 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:46,749 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-13 17:58:46,749 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:46,749 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:46,749 INFO L85 PathProgramCache]: Analyzing trace with hash 1579167755, now seen corresponding path program 1 times [2022-07-13 17:58:46,749 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:46,749 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1233571418] [2022-07-13 17:58:46,750 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:46,750 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:46,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:58:46,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-13 17:58:46,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,791 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:46,792 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:46,792 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1233571418] [2022-07-13 17:58:46,792 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1233571418] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:46,792 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:46,792 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:46,792 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [33410755] [2022-07-13 17:58:46,792 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:46,793 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:46,793 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:46,793 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:46,793 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:46,794 INFO L87 Difference]: Start difference. First operand 138 states and 171 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:58:46,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:46,894 INFO L93 Difference]: Finished difference Result 276 states and 346 transitions. [2022-07-13 17:58:46,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:58:46,894 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-07-13 17:58:46,895 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:46,897 INFO L225 Difference]: With dead ends: 276 [2022-07-13 17:58:46,897 INFO L226 Difference]: Without dead ends: 146 [2022-07-13 17:58:46,898 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-13 17:58:46,905 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 63 mSDsluCounter, 275 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 367 SdHoareTripleChecker+Invalid, 122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:46,906 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 367 Invalid, 122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:46,907 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2022-07-13 17:58:46,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 141. [2022-07-13 17:58:46,927 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 110 states have (on average 1.2818181818181817) internal successors, (141), 117 states have internal predecessors, (141), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2022-07-13 17:58:46,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 174 transitions. [2022-07-13 17:58:46,928 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 174 transitions. Word has length 44 [2022-07-13 17:58:46,928 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:46,928 INFO L495 AbstractCegarLoop]: Abstraction has 141 states and 174 transitions. [2022-07-13 17:58:46,928 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:58:46,928 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 174 transitions. [2022-07-13 17:58:46,930 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-13 17:58:46,933 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:46,933 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:46,933 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-13 17:58:46,933 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:46,934 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:46,934 INFO L85 PathProgramCache]: Analyzing trace with hash -109775987, now seen corresponding path program 1 times [2022-07-13 17:58:46,934 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:46,934 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [192979221] [2022-07-13 17:58:46,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:46,934 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:46,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:58:46,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-13 17:58:46,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:46,972 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:46,973 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:46,973 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [192979221] [2022-07-13 17:58:46,973 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [192979221] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:46,973 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:46,973 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:58:46,973 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1591978206] [2022-07-13 17:58:46,973 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:46,974 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:58:46,974 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:46,974 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:58:46,974 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:58:46,974 INFO L87 Difference]: Start difference. First operand 141 states and 174 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:58:47,056 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:47,056 INFO L93 Difference]: Finished difference Result 284 states and 357 transitions. [2022-07-13 17:58:47,057 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 17:58:47,057 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-07-13 17:58:47,057 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:47,058 INFO L225 Difference]: With dead ends: 284 [2022-07-13 17:58:47,058 INFO L226 Difference]: Without dead ends: 151 [2022-07-13 17:58:47,058 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:58:47,059 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 65 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 77 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 77 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:47,059 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 289 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 77 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:47,060 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151 states. [2022-07-13 17:58:47,067 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151 to 143. [2022-07-13 17:58:47,067 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 143 states, 112 states have (on average 1.2767857142857142) internal successors, (143), 119 states have internal predecessors, (143), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2022-07-13 17:58:47,068 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 143 states to 143 states and 176 transitions. [2022-07-13 17:58:47,068 INFO L78 Accepts]: Start accepts. Automaton has 143 states and 176 transitions. Word has length 44 [2022-07-13 17:58:47,068 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:47,069 INFO L495 AbstractCegarLoop]: Abstraction has 143 states and 176 transitions. [2022-07-13 17:58:47,069 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:58:47,069 INFO L276 IsEmpty]: Start isEmpty. Operand 143 states and 176 transitions. [2022-07-13 17:58:47,070 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-07-13 17:58:47,070 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:47,070 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:47,070 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-13 17:58:47,070 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:47,071 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:47,071 INFO L85 PathProgramCache]: Analyzing trace with hash 312925839, now seen corresponding path program 1 times [2022-07-13 17:58:47,071 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:47,071 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [967718711] [2022-07-13 17:58:47,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:47,071 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:47,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:58:47,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-13 17:58:47,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,119 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:47,119 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:47,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [967718711] [2022-07-13 17:58:47,120 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [967718711] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:47,120 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:47,120 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:58:47,120 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [327629714] [2022-07-13 17:58:47,120 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:47,120 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:58:47,121 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:47,127 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:58:47,127 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:58:47,128 INFO L87 Difference]: Start difference. First operand 143 states and 176 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:58:47,272 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:47,272 INFO L93 Difference]: Finished difference Result 400 states and 514 transitions. [2022-07-13 17:58:47,272 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:58:47,272 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-07-13 17:58:47,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:47,274 INFO L225 Difference]: With dead ends: 400 [2022-07-13 17:58:47,274 INFO L226 Difference]: Without dead ends: 265 [2022-07-13 17:58:47,275 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:58:47,275 INFO L413 NwaCegarLoop]: 143 mSDtfsCounter, 198 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 134 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 204 SdHoareTripleChecker+Valid, 308 SdHoareTripleChecker+Invalid, 186 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 134 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:47,275 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [204 Valid, 308 Invalid, 186 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 134 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:47,276 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 265 states. [2022-07-13 17:58:47,287 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 265 to 257. [2022-07-13 17:58:47,288 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 257 states, 198 states have (on average 1.2676767676767677) internal successors, (251), 209 states have internal predecessors, (251), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (44), 29 states have call predecessors, (44), 29 states have call successors, (44) [2022-07-13 17:58:47,289 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 257 states to 257 states and 324 transitions. [2022-07-13 17:58:47,289 INFO L78 Accepts]: Start accepts. Automaton has 257 states and 324 transitions. Word has length 44 [2022-07-13 17:58:47,290 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:47,290 INFO L495 AbstractCegarLoop]: Abstraction has 257 states and 324 transitions. [2022-07-13 17:58:47,290 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:58:47,290 INFO L276 IsEmpty]: Start isEmpty. Operand 257 states and 324 transitions. [2022-07-13 17:58:47,290 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-07-13 17:58:47,291 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:47,291 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:47,291 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-13 17:58:47,291 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:47,291 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:47,292 INFO L85 PathProgramCache]: Analyzing trace with hash 299238822, now seen corresponding path program 1 times [2022-07-13 17:58:47,292 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:47,292 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [653250525] [2022-07-13 17:58:47,292 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:47,292 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:47,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:58:47,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:47,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-13 17:58:47,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,335 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:47,335 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:47,336 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [653250525] [2022-07-13 17:58:47,336 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [653250525] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:47,336 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:47,336 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 17:58:47,336 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [764222339] [2022-07-13 17:58:47,336 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:47,336 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 17:58:47,337 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:47,337 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 17:58:47,337 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:58:47,337 INFO L87 Difference]: Start difference. First operand 257 states and 324 transitions. Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:58:47,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:47,535 INFO L93 Difference]: Finished difference Result 755 states and 978 transitions. [2022-07-13 17:58:47,535 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-13 17:58:47,535 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-07-13 17:58:47,535 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:47,539 INFO L225 Difference]: With dead ends: 755 [2022-07-13 17:58:47,539 INFO L226 Difference]: Without dead ends: 506 [2022-07-13 17:58:47,540 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-07-13 17:58:47,540 INFO L413 NwaCegarLoop]: 79 mSDtfsCounter, 146 mSDsluCounter, 274 mSDsCounter, 0 mSdLazyCounter, 173 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 153 SdHoareTripleChecker+Valid, 353 SdHoareTripleChecker+Invalid, 215 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 173 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:47,541 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [153 Valid, 353 Invalid, 215 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 173 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:58:47,544 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 506 states. [2022-07-13 17:58:47,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 506 to 486. [2022-07-13 17:58:47,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 486 states, 369 states have (on average 1.2249322493224932) internal successors, (452), 390 states have internal predecessors, (452), 58 states have call successors, (58), 56 states have call predecessors, (58), 58 states have return successors, (93), 58 states have call predecessors, (93), 58 states have call successors, (93) [2022-07-13 17:58:47,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 486 states to 486 states and 603 transitions. [2022-07-13 17:58:47,565 INFO L78 Accepts]: Start accepts. Automaton has 486 states and 603 transitions. Word has length 46 [2022-07-13 17:58:47,565 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:47,565 INFO L495 AbstractCegarLoop]: Abstraction has 486 states and 603 transitions. [2022-07-13 17:58:47,565 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:58:47,565 INFO L276 IsEmpty]: Start isEmpty. Operand 486 states and 603 transitions. [2022-07-13 17:58:47,566 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-07-13 17:58:47,566 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:47,566 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:47,566 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-13 17:58:47,566 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:47,566 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:47,567 INFO L85 PathProgramCache]: Analyzing trace with hash -658311774, now seen corresponding path program 1 times [2022-07-13 17:58:47,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:47,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1583194700] [2022-07-13 17:58:47,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:47,567 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:47,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-13 17:58:47,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:58:47,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:58:47,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-13 17:58:47,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,613 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:47,614 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:47,614 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1583194700] [2022-07-13 17:58:47,614 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1583194700] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:47,614 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:47,614 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 17:58:47,614 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [689056179] [2022-07-13 17:58:47,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:47,615 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 17:58:47,615 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:47,615 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 17:58:47,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:58:47,615 INFO L87 Difference]: Start difference. First operand 486 states and 603 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-13 17:58:47,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:47,890 INFO L93 Difference]: Finished difference Result 980 states and 1227 transitions. [2022-07-13 17:58:47,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-07-13 17:58:47,891 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 50 [2022-07-13 17:58:47,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:47,893 INFO L225 Difference]: With dead ends: 980 [2022-07-13 17:58:47,893 INFO L226 Difference]: Without dead ends: 502 [2022-07-13 17:58:47,895 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2022-07-13 17:58:47,895 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 175 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 330 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 177 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 381 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 330 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:47,895 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [177 Valid, 188 Invalid, 381 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 330 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:58:47,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 502 states. [2022-07-13 17:58:47,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 502 to 482. [2022-07-13 17:58:47,912 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 482 states, 365 states have (on average 1.2054794520547945) internal successors, (440), 386 states have internal predecessors, (440), 58 states have call successors, (58), 56 states have call predecessors, (58), 58 states have return successors, (93), 58 states have call predecessors, (93), 58 states have call successors, (93) [2022-07-13 17:58:47,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 482 states to 482 states and 591 transitions. [2022-07-13 17:58:47,916 INFO L78 Accepts]: Start accepts. Automaton has 482 states and 591 transitions. Word has length 50 [2022-07-13 17:58:47,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:47,916 INFO L495 AbstractCegarLoop]: Abstraction has 482 states and 591 transitions. [2022-07-13 17:58:47,917 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-13 17:58:47,917 INFO L276 IsEmpty]: Start isEmpty. Operand 482 states and 591 transitions. [2022-07-13 17:58:47,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-13 17:58:47,917 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:47,918 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:47,918 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-13 17:58:47,918 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:47,918 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:47,918 INFO L85 PathProgramCache]: Analyzing trace with hash -1829706971, now seen corresponding path program 1 times [2022-07-13 17:58:47,918 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:47,919 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1140899973] [2022-07-13 17:58:47,919 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:47,919 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:47,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 17:58:47,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-13 17:58:47,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:47,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 17:58:48,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-07-13 17:58:48,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,003 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:48,003 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:48,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1140899973] [2022-07-13 17:58:48,003 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1140899973] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:48,004 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:58:48,004 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:58:48,004 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [758250344] [2022-07-13 17:58:48,004 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:48,004 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:48,004 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:48,005 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:48,005 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:58:48,005 INFO L87 Difference]: Start difference. First operand 482 states and 591 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-13 17:58:48,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:48,299 INFO L93 Difference]: Finished difference Result 855 states and 1065 transitions. [2022-07-13 17:58:48,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-07-13 17:58:48,300 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 52 [2022-07-13 17:58:48,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:48,303 INFO L225 Difference]: With dead ends: 855 [2022-07-13 17:58:48,303 INFO L226 Difference]: Without dead ends: 853 [2022-07-13 17:58:48,304 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-07-13 17:58:48,304 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 378 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 249 mSolverCounterSat, 144 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 379 SdHoareTripleChecker+Valid, 166 SdHoareTripleChecker+Invalid, 393 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 144 IncrementalHoareTripleChecker+Valid, 249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:48,305 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [379 Valid, 166 Invalid, 393 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [144 Valid, 249 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:58:48,305 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 853 states. [2022-07-13 17:58:48,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 853 to 689. [2022-07-13 17:58:48,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 689 states, 526 states have (on average 1.209125475285171) internal successors, (636), 562 states have internal predecessors, (636), 80 states have call successors, (80), 70 states have call predecessors, (80), 82 states have return successors, (146), 79 states have call predecessors, (146), 80 states have call successors, (146) [2022-07-13 17:58:48,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 689 states to 689 states and 862 transitions. [2022-07-13 17:58:48,331 INFO L78 Accepts]: Start accepts. Automaton has 689 states and 862 transitions. Word has length 52 [2022-07-13 17:58:48,331 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:48,331 INFO L495 AbstractCegarLoop]: Abstraction has 689 states and 862 transitions. [2022-07-13 17:58:48,331 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 3 states have internal predecessors, (43), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-07-13 17:58:48,331 INFO L276 IsEmpty]: Start isEmpty. Operand 689 states and 862 transitions. [2022-07-13 17:58:48,333 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-07-13 17:58:48,333 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:48,333 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:48,333 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-13 17:58:48,333 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:48,334 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:48,334 INFO L85 PathProgramCache]: Analyzing trace with hash 16335344, now seen corresponding path program 1 times [2022-07-13 17:58:48,334 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:48,334 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [588889556] [2022-07-13 17:58:48,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:48,334 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:48,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 17:58:48,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-13 17:58:48,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:58:48,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 17:58:48,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-13 17:58:48,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2022-07-13 17:58:48,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-07-13 17:58:48,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,424 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 4 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-07-13 17:58:48,424 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:48,424 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [588889556] [2022-07-13 17:58:48,425 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [588889556] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:58:48,425 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1384863829] [2022-07-13 17:58:48,425 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:48,425 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:48,425 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:48,427 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:58:48,449 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-13 17:58:48,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,528 INFO L263 TraceCheckSpWp]: Trace formula consists of 466 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-13 17:58:48,532 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:58:48,593 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:48,593 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 17:58:48,593 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1384863829] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:48,593 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 17:58:48,594 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 10 [2022-07-13 17:58:48,594 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1574640590] [2022-07-13 17:58:48,594 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:48,594 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:58:48,594 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:48,595 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:58:48,595 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-07-13 17:58:48,595 INFO L87 Difference]: Start difference. First operand 689 states and 862 transitions. Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-07-13 17:58:48,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:48,628 INFO L93 Difference]: Finished difference Result 1227 states and 1554 transitions. [2022-07-13 17:58:48,628 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:58:48,629 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 90 [2022-07-13 17:58:48,629 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:48,631 INFO L225 Difference]: With dead ends: 1227 [2022-07-13 17:58:48,631 INFO L226 Difference]: Without dead ends: 640 [2022-07-13 17:58:48,632 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-07-13 17:58:48,633 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 38 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:48,633 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 191 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:48,634 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 640 states. [2022-07-13 17:58:48,656 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 640 to 640. [2022-07-13 17:58:48,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 640 states, 488 states have (on average 1.2008196721311475) internal successors, (586), 522 states have internal predecessors, (586), 75 states have call successors, (75), 65 states have call predecessors, (75), 76 states have return successors, (119), 75 states have call predecessors, (119), 75 states have call successors, (119) [2022-07-13 17:58:48,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 640 states to 640 states and 780 transitions. [2022-07-13 17:58:48,659 INFO L78 Accepts]: Start accepts. Automaton has 640 states and 780 transitions. Word has length 90 [2022-07-13 17:58:48,659 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:48,659 INFO L495 AbstractCegarLoop]: Abstraction has 640 states and 780 transitions. [2022-07-13 17:58:48,659 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-07-13 17:58:48,660 INFO L276 IsEmpty]: Start isEmpty. Operand 640 states and 780 transitions. [2022-07-13 17:58:48,661 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-07-13 17:58:48,661 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:48,661 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:48,694 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-13 17:58:48,878 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-13 17:58:48,878 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:48,879 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:48,879 INFO L85 PathProgramCache]: Analyzing trace with hash 1128084440, now seen corresponding path program 1 times [2022-07-13 17:58:48,879 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:48,879 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1812980001] [2022-07-13 17:58:48,879 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:48,879 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:48,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 17:58:48,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-13 17:58:48,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:58:48,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 17:58:48,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-13 17:58:48,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:48,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-07-13 17:58:48,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:49,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-07-13 17:58:49,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,002 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 19 proven. 3 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-07-13 17:58:49,015 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:49,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1812980001] [2022-07-13 17:58:49,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1812980001] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:58:49,016 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [41725304] [2022-07-13 17:58:49,016 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:49,016 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:49,016 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:49,017 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:58:49,018 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-13 17:58:49,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,114 INFO L263 TraceCheckSpWp]: Trace formula consists of 468 conjuncts, 11 conjunts are in the unsatisfiable core [2022-07-13 17:58:49,116 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:58:49,185 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:58:49,185 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 17:58:49,185 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [41725304] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:49,185 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 17:58:49,185 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 11 [2022-07-13 17:58:49,186 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [74998366] [2022-07-13 17:58:49,186 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:49,186 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:58:49,186 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:49,186 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:58:49,186 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-07-13 17:58:49,186 INFO L87 Difference]: Start difference. First operand 640 states and 780 transitions. Second operand has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-07-13 17:58:49,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:49,314 INFO L93 Difference]: Finished difference Result 1641 states and 2101 transitions. [2022-07-13 17:58:49,314 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:58:49,315 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 93 [2022-07-13 17:58:49,315 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:49,319 INFO L225 Difference]: With dead ends: 1641 [2022-07-13 17:58:49,319 INFO L226 Difference]: Without dead ends: 1103 [2022-07-13 17:58:49,321 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 105 SyntacticMatches, 3 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2022-07-13 17:58:49,321 INFO L413 NwaCegarLoop]: 160 mSDtfsCounter, 172 mSDsluCounter, 466 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 626 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:49,321 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [174 Valid, 626 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:49,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1103 states. [2022-07-13 17:58:49,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1103 to 903. [2022-07-13 17:58:49,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 903 states, 686 states have (on average 1.2011661807580174) internal successors, (824), 733 states have internal predecessors, (824), 107 states have call successors, (107), 95 states have call predecessors, (107), 109 states have return successors, (173), 102 states have call predecessors, (173), 107 states have call successors, (173) [2022-07-13 17:58:49,370 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 903 states to 903 states and 1104 transitions. [2022-07-13 17:58:49,371 INFO L78 Accepts]: Start accepts. Automaton has 903 states and 1104 transitions. Word has length 93 [2022-07-13 17:58:49,371 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:49,371 INFO L495 AbstractCegarLoop]: Abstraction has 903 states and 1104 transitions. [2022-07-13 17:58:49,371 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-07-13 17:58:49,371 INFO L276 IsEmpty]: Start isEmpty. Operand 903 states and 1104 transitions. [2022-07-13 17:58:49,372 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-07-13 17:58:49,372 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:58:49,372 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:49,405 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-13 17:58:49,587 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-13 17:58:49,588 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:58:49,588 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:58:49,588 INFO L85 PathProgramCache]: Analyzing trace with hash 994070934, now seen corresponding path program 1 times [2022-07-13 17:58:49,588 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:58:49,588 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1740025053] [2022-07-13 17:58:49,588 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:49,588 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:58:49,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 17:58:49,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-07-13 17:58:49,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:58:49,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 17:58:49,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-13 17:58:49,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-07-13 17:58:49,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:58:49,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-07-13 17:58:49,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,646 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 8 proven. 1 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-07-13 17:58:49,646 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:58:49,646 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1740025053] [2022-07-13 17:58:49,646 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1740025053] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:58:49,646 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [934692068] [2022-07-13 17:58:49,646 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:58:49,646 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:49,646 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:58:49,660 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:58:49,687 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-13 17:58:49,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:58:49,789 INFO L263 TraceCheckSpWp]: Trace formula consists of 469 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-13 17:58:49,791 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:58:49,821 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-13 17:58:49,821 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 17:58:49,821 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [934692068] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:58:49,821 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 17:58:49,821 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2022-07-13 17:58:49,821 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [951793785] [2022-07-13 17:58:49,821 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:58:49,822 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:58:49,822 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:58:49,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:58:49,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2022-07-13 17:58:49,822 INFO L87 Difference]: Start difference. First operand 903 states and 1104 transitions. Second operand has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-13 17:58:49,869 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:58:49,869 INFO L93 Difference]: Finished difference Result 1237 states and 1508 transitions. [2022-07-13 17:58:49,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 17:58:49,870 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 93 [2022-07-13 17:58:49,870 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:58:49,870 INFO L225 Difference]: With dead ends: 1237 [2022-07-13 17:58:49,871 INFO L226 Difference]: Without dead ends: 0 [2022-07-13 17:58:49,872 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 116 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=146, Unknown=0, NotChecked=0, Total=182 [2022-07-13 17:58:49,873 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 36 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 315 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:58:49,873 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 315 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:58:49,873 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-13 17:58:49,873 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-13 17:58:49,873 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 17:58:49,873 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-13 17:58:49,873 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 93 [2022-07-13 17:58:49,874 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:58:49,874 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 17:58:49,874 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-13 17:58:49,874 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-13 17:58:49,874 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-13 17:58:49,876 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-13 17:58:49,909 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-13 17:58:50,091 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:58:50,092 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-13 17:58:52,634 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 400 406) no Hoare annotation was computed. [2022-07-13 17:58:52,634 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 400 406) the Hoare annotation is: true [2022-07-13 17:58:52,634 INFO L899 garLoopResultBuilder]: For program point L192-1(lines 188 199) no Hoare annotation was computed. [2022-07-13 17:58:52,634 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 188 199) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (not (<= 1 ~pumpRunning~0))) (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 ~waterLevel~0)) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-07-13 17:58:52,634 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 188 199) no Hoare annotation was computed. [2022-07-13 17:58:52,634 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 200 208) the Hoare annotation is: true [2022-07-13 17:58:52,634 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 200 208) no Hoare annotation was computed. [2022-07-13 17:58:52,634 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 200 208) no Hoare annotation was computed. [2022-07-13 17:58:52,635 INFO L895 garLoopResultBuilder]: At program point L448(line 448) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-13 17:58:52,635 INFO L899 garLoopResultBuilder]: For program point L940(line 940) no Hoare annotation was computed. [2022-07-13 17:58:52,635 INFO L899 garLoopResultBuilder]: For program point L168(lines 168 172) no Hoare annotation was computed. [2022-07-13 17:58:52,635 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 376 399) no Hoare annotation was computed. [2022-07-13 17:58:52,635 INFO L895 garLoopResultBuilder]: At program point L168-2(lines 164 175) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse3) (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3))) [2022-07-13 17:58:52,635 INFO L895 garLoopResultBuilder]: At program point L453(line 453) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-13 17:58:52,635 INFO L895 garLoopResultBuilder]: At program point L453-1(lines 434 458) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= ~methAndRunningLastTime~0 0))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 .cse3 .cse4 (not (= |old(~waterLevel~0)| 1)) .cse0) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 .cse3 (and .cse1 .cse5) .cse0 (and (<= 1 ~pumpRunning~0) .cse4 (<= 2 ~waterLevel~0) .cse5) (not (<= 1 |old(~waterLevel~0)|)))))) [2022-07-13 17:58:52,635 INFO L899 garLoopResultBuilder]: For program point L387-1(lines 387 393) no Hoare annotation was computed. [2022-07-13 17:58:52,635 INFO L899 garLoopResultBuilder]: For program point L288(lines 288 298) no Hoare annotation was computed. [2022-07-13 17:58:52,635 INFO L899 garLoopResultBuilder]: For program point L284(lines 284 301) no Hoare annotation was computed. [2022-07-13 17:58:52,635 INFO L895 garLoopResultBuilder]: At program point L284-1(lines 276 304) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse5))) (or .cse0 .cse1 .cse4 .cse2 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse6 .cse7 .cse9) (or .cse2 .cse10 .cse7 .cse9 .cse8) (or (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse3 .cse4 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) .cse2 .cse10 .cse8))) [2022-07-13 17:58:52,635 INFO L895 garLoopResultBuilder]: At program point L565(lines 550 568) the Hoare annotation is: (let ((.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse3 .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse3 (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2))) [2022-07-13 17:58:52,635 INFO L895 garLoopResultBuilder]: At program point L941(lines 936 943) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-13 17:58:52,636 INFO L895 garLoopResultBuilder]: At program point L491(lines 486 494) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~waterLevel~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 .cse3 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) .cse4) (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse5 .cse6 .cse0 (and (<= 1 ~pumpRunning~0) .cse7 (<= 2 ~waterLevel~0) .cse8) .cse9 (and .cse2 .cse3 .cse8))) (or .cse0 .cse1 .cse10 .cse4) (or .cse5 .cse6 .cse7 (not (= |old(~waterLevel~0)| 1)) .cse0) (or .cse5 .cse6 .cse0 .cse9 .cse10))) [2022-07-13 17:58:52,636 INFO L895 garLoopResultBuilder]: At program point L260(lines 255 263) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) .cse3) (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3))) [2022-07-13 17:58:52,636 INFO L899 garLoopResultBuilder]: For program point L289(lines 289 295) no Hoare annotation was computed. [2022-07-13 17:58:52,636 INFO L899 garLoopResultBuilder]: For program point L380-1(lines 379 398) no Hoare annotation was computed. [2022-07-13 17:58:52,636 INFO L899 garLoopResultBuilder]: For program point L442(lines 442 450) no Hoare annotation was computed. [2022-07-13 17:58:52,636 INFO L899 garLoopResultBuilder]: For program point L438(lines 438 455) no Hoare annotation was computed. [2022-07-13 17:58:52,636 INFO L895 garLoopResultBuilder]: At program point L282(line 282) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= ~methAndRunningLastTime~0 0))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 .cse3 .cse4 (not (= |old(~waterLevel~0)| 1)) .cse0) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 .cse3 (and .cse1 .cse5) .cse0 (and (<= 1 ~pumpRunning~0) .cse4 (<= 2 ~waterLevel~0) .cse5) (not (<= 1 |old(~waterLevel~0)|)))))) [2022-07-13 17:58:52,636 INFO L899 garLoopResultBuilder]: For program point L282-1(line 282) no Hoare annotation was computed. [2022-07-13 17:58:52,636 INFO L895 garLoopResultBuilder]: At program point L472(lines 467 474) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))))) [2022-07-13 17:58:52,636 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 376 399) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (= ~pumpRunning~0 0) .cse2 .cse3) (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse5) (or .cse0 .cse2 .cse1 .cse4 .cse5))) [2022-07-13 17:58:52,636 INFO L899 garLoopResultBuilder]: For program point L559(lines 559 563) no Hoare annotation was computed. [2022-07-13 17:58:52,636 INFO L899 garLoopResultBuilder]: For program point L559-2(lines 559 563) no Hoare annotation was computed. [2022-07-13 17:58:52,636 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 376 399) no Hoare annotation was computed. [2022-07-13 17:58:52,636 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 940) no Hoare annotation was computed. [2022-07-13 17:58:52,636 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-07-13 17:58:52,636 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-07-13 17:58:52,637 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-07-13 17:58:52,637 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-07-13 17:58:52,637 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-07-13 17:58:52,637 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-07-13 17:58:52,637 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-07-13 17:58:52,637 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-07-13 17:58:52,637 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-07-13 17:58:52,637 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-07-13 17:58:52,637 INFO L895 garLoopResultBuilder]: At program point L960(lines 956 962) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:52,637 INFO L902 garLoopResultBuilder]: At program point L126(lines 118 128) the Hoare annotation is: true [2022-07-13 17:58:52,637 INFO L902 garLoopResultBuilder]: At program point L151(lines 132 154) the Hoare annotation is: true [2022-07-13 17:58:52,637 INFO L895 garLoopResultBuilder]: At program point L362(lines 315 363) the Hoare annotation is: false [2022-07-13 17:58:52,637 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-13 17:58:52,637 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-13 17:58:52,637 INFO L899 garLoopResultBuilder]: For program point L317(lines 316 361) no Hoare annotation was computed. [2022-07-13 17:58:52,637 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-13 17:58:52,637 INFO L899 garLoopResultBuilder]: For program point L346(lines 346 357) no Hoare annotation was computed. [2022-07-13 17:58:52,637 INFO L895 garLoopResultBuilder]: At program point L338(line 338) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3))) [2022-07-13 17:58:52,637 INFO L895 garLoopResultBuilder]: At program point L359(lines 316 361) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3))) [2022-07-13 17:58:52,637 INFO L899 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-07-13 17:58:52,637 INFO L899 garLoopResultBuilder]: For program point L326-1(lines 326 332) no Hoare annotation was computed. [2022-07-13 17:58:52,637 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-13 17:58:52,637 INFO L899 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-07-13 17:58:52,638 INFO L895 garLoopResultBuilder]: At program point L273(lines 268 275) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:52,638 INFO L895 garLoopResultBuilder]: At program point L975(lines 970 978) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:52,638 INFO L895 garLoopResultBuilder]: At program point L967(lines 963 969) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:52,639 INFO L899 garLoopResultBuilder]: For program point L352(lines 352 356) no Hoare annotation was computed. [2022-07-13 17:58:52,639 INFO L895 garLoopResultBuilder]: At program point L352-2(lines 346 357) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3))) [2022-07-13 17:58:52,639 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 17:58:52,639 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2022-07-13 17:58:52,639 INFO L899 garLoopResultBuilder]: For program point L336-1(lines 336 342) no Hoare annotation was computed. [2022-07-13 17:58:52,639 INFO L899 garLoopResultBuilder]: For program point L142(lines 142 149) no Hoare annotation was computed. [2022-07-13 17:58:52,639 INFO L902 garLoopResultBuilder]: At program point L365(lines 306 369) the Hoare annotation is: true [2022-07-13 17:58:52,639 INFO L899 garLoopResultBuilder]: For program point L142-2(lines 142 149) no Hoare annotation was computed. [2022-07-13 17:58:52,639 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and (<= 1 ~pumpRunning~0) .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3))) [2022-07-13 17:58:52,640 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 408 432) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))))) [2022-07-13 17:58:52,640 INFO L895 garLoopResultBuilder]: At program point L250(lines 241 254) the Hoare annotation is: (let ((.cse4 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) (and .cse3 (<= 2 ~waterLevel~0)) (and .cse4 .cse3)) (or (not (= ~waterLevel~0 1)) .cse4 .cse0 .cse1 .cse5) (or .cse0 .cse3 .cse1 .cse2 .cse5))) [2022-07-13 17:58:52,640 INFO L895 garLoopResultBuilder]: At program point L422(line 422) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse4)) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) .cse4 (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0))) (.cse3 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0)))))) [2022-07-13 17:58:52,640 INFO L895 garLoopResultBuilder]: At program point L546(lines 531 549) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse6)) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) .cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0)) .cse4)))) [2022-07-13 17:58:52,640 INFO L899 garLoopResultBuilder]: For program point L416(lines 416 424) no Hoare annotation was computed. [2022-07-13 17:58:52,640 INFO L899 garLoopResultBuilder]: For program point L412(lines 412 429) no Hoare annotation was computed. [2022-07-13 17:58:52,640 INFO L899 garLoopResultBuilder]: For program point L540(lines 540 544) no Hoare annotation was computed. [2022-07-13 17:58:52,640 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 408 432) no Hoare annotation was computed. [2022-07-13 17:58:52,641 INFO L899 garLoopResultBuilder]: For program point L540-2(lines 540 544) no Hoare annotation was computed. [2022-07-13 17:58:52,641 INFO L899 garLoopResultBuilder]: For program point L245(lines 245 251) no Hoare annotation was computed. [2022-07-13 17:58:52,641 INFO L895 garLoopResultBuilder]: At program point L464(lines 459 466) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))))) [2022-07-13 17:58:52,641 INFO L895 garLoopResultBuilder]: At program point L427(line 427) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0))))) [2022-07-13 17:58:52,641 INFO L899 garLoopResultBuilder]: For program point L427-1(lines 408 432) no Hoare annotation was computed. [2022-07-13 17:58:52,641 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 176 187) no Hoare annotation was computed. [2022-07-13 17:58:52,641 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 176 187) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-07-13 17:58:52,641 INFO L899 garLoopResultBuilder]: For program point L180-1(lines 176 187) no Hoare annotation was computed. [2022-07-13 17:58:52,644 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:58:52,645 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-13 17:58:52,672 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.07 05:58:52 BoogieIcfgContainer [2022-07-13 17:58:52,672 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-13 17:58:52,672 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-13 17:58:52,673 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-13 17:58:52,673 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-13 17:58:52,687 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:58:45" (3/4) ... [2022-07-13 17:58:52,689 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-13 17:58:52,694 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-13 17:58:52,694 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-13 17:58:52,694 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-13 17:58:52,694 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-13 17:58:52,694 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-13 17:58:52,694 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:58:52,694 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-13 17:58:52,699 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-07-13 17:58:52,699 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-13 17:58:52,700 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-13 17:58:52,700 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-13 17:58:52,700 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-13 17:58:52,700 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:58:52,701 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:58:52,716 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-13 17:58:52,716 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-13 17:58:52,716 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-13 17:58:52,716 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) || (((((1 <= pumpRunning && tmp == systemActive) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) [2022-07-13 17:58:52,717 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-07-13 17:58:52,717 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) [2022-07-13 17:58:52,717 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || tmp == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || tmp == 0) || !(2 <= \old(waterLevel)))) && ((((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-07-13 17:58:52,718 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-07-13 17:58:52,718 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-07-13 17:58:52,718 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) && ((((!(waterLevel == 1) || 1 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-07-13 17:58:52,718 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-07-13 17:58:52,718 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) [2022-07-13 17:58:52,719 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-07-13 17:58:52,719 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) [2022-07-13 17:58:52,719 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-07-13 17:58:52,731 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-13 17:58:52,732 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-13 17:58:52,732 INFO L158 Benchmark]: Toolchain (without parser) took 7901.57ms. Allocated memory was 107.0MB in the beginning and 188.7MB in the end (delta: 81.8MB). Free memory was 70.5MB in the beginning and 129.7MB in the end (delta: -59.2MB). Peak memory consumption was 21.7MB. Max. memory is 16.1GB. [2022-07-13 17:58:52,732 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 107.0MB. Free memory is still 87.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 17:58:52,733 INFO L158 Benchmark]: CACSL2BoogieTranslator took 439.23ms. Allocated memory is still 107.0MB. Free memory was 70.3MB in the beginning and 74.8MB in the end (delta: -4.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-07-13 17:58:52,733 INFO L158 Benchmark]: Boogie Procedure Inliner took 82.82ms. Allocated memory is still 107.0MB. Free memory was 74.8MB in the beginning and 72.2MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:58:52,733 INFO L158 Benchmark]: Boogie Preprocessor took 58.33ms. Allocated memory is still 107.0MB. Free memory was 72.2MB in the beginning and 70.7MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:58:52,733 INFO L158 Benchmark]: RCFGBuilder took 355.82ms. Allocated memory is still 107.0MB. Free memory was 70.7MB in the beginning and 53.9MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-13 17:58:52,734 INFO L158 Benchmark]: TraceAbstraction took 6901.42ms. Allocated memory was 107.0MB in the beginning and 188.7MB in the end (delta: 81.8MB). Free memory was 53.6MB in the beginning and 136.0MB in the end (delta: -82.4MB). Peak memory consumption was 84.7MB. Max. memory is 16.1GB. [2022-07-13 17:58:52,734 INFO L158 Benchmark]: Witness Printer took 59.41ms. Allocated memory is still 188.7MB. Free memory was 136.0MB in the beginning and 129.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-13 17:58:52,735 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 107.0MB. Free memory is still 87.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 439.23ms. Allocated memory is still 107.0MB. Free memory was 70.3MB in the beginning and 74.8MB in the end (delta: -4.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 82.82ms. Allocated memory is still 107.0MB. Free memory was 74.8MB in the beginning and 72.2MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 58.33ms. Allocated memory is still 107.0MB. Free memory was 72.2MB in the beginning and 70.7MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 355.82ms. Allocated memory is still 107.0MB. Free memory was 70.7MB in the beginning and 53.9MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 6901.42ms. Allocated memory was 107.0MB in the beginning and 188.7MB in the end (delta: 81.8MB). Free memory was 53.6MB in the beginning and 136.0MB in the end (delta: -82.4MB). Peak memory consumption was 84.7MB. Max. memory is 16.1GB. * Witness Printer took 59.41ms. Allocated memory is still 188.7MB. Free memory was 136.0MB in the beginning and 129.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 940]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 88 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.8s, OverallIterations: 13, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1654 SdHoareTripleChecker+Valid, 0.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1626 mSDsluCounter, 3565 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2193 mSDsCounter, 416 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1271 IncrementalHoareTripleChecker+Invalid, 1687 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 416 mSolverCounterUnsat, 1372 mSDtfsCounter, 1271 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 493 GetRequests, 386 SyntacticMatches, 4 SemanticMatches, 103 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 135 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=903occurred in iteration=12, InterpolantAutomatonStates: 92, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 13 MinimizatonAttempts, 431 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 1597 PreInvPairs, 1740 NumberOfFragments, 1567 HoareAnnotationTreeSize, 1597 FomulaSimplifications, 117 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 40 FomulaSimplificationsInter, 10087 FormulaSimplificationTreeSizeReductionInter, 2.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 953 NumberOfCodeBlocks, 953 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 937 ConstructedInterpolants, 0 QuantifiedInterpolants, 1633 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1403 ConjunctsInSsa, 20 ConjunctsInUnsatCore, 16 InterpolantComputations, 13 PerfectInterpolantSequences, 170/178 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 459]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 255]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 550]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || tmp == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || tmp == 0) || !(2 <= \old(waterLevel)))) && ((((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: ((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) || (((((1 <= pumpRunning && tmp == systemActive) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 970]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 268]: Loop Invariant Derived loop invariant: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) && ((((!(waterLevel == 1) || 1 <= \result) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 434]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-07-13 17:58:52,789 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE