./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0552f986eafe304f33f56d4376c7c6a56e2d691e1035259c5c13e13b2a7157c1 --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-13 17:59:27,363 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-13 17:59:27,365 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-13 17:59:27,405 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-13 17:59:27,406 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-13 17:59:27,407 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-13 17:59:27,409 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-13 17:59:27,413 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-13 17:59:27,416 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-13 17:59:27,420 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-13 17:59:27,420 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-13 17:59:27,422 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-13 17:59:27,423 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-13 17:59:27,424 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-13 17:59:27,425 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-13 17:59:27,428 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-13 17:59:27,429 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-13 17:59:27,430 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-13 17:59:27,432 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-13 17:59:27,437 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-13 17:59:27,438 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-13 17:59:27,439 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-13 17:59:27,440 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-13 17:59:27,441 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-13 17:59:27,442 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-13 17:59:27,448 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-13 17:59:27,449 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-13 17:59:27,449 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-13 17:59:27,450 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-13 17:59:27,451 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-13 17:59:27,452 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-13 17:59:27,452 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-13 17:59:27,453 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-13 17:59:27,454 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-13 17:59:27,455 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-13 17:59:27,455 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-13 17:59:27,456 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-13 17:59:27,457 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-13 17:59:27,457 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-13 17:59:27,458 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-13 17:59:27,458 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-13 17:59:27,460 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-13 17:59:27,461 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-13 17:59:27,493 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-13 17:59:27,494 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-13 17:59:27,494 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-13 17:59:27,494 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-13 17:59:27,495 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-13 17:59:27,495 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-13 17:59:27,496 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-13 17:59:27,496 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-13 17:59:27,496 INFO L138 SettingsManager]: * Use SBE=true [2022-07-13 17:59:27,497 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-13 17:59:27,497 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-13 17:59:27,498 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-13 17:59:27,498 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-13 17:59:27,498 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-13 17:59:27,498 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-13 17:59:27,498 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-13 17:59:27,499 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-13 17:59:27,499 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-13 17:59:27,499 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-13 17:59:27,499 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-13 17:59:27,499 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-13 17:59:27,500 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-13 17:59:27,500 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-13 17:59:27,500 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-13 17:59:27,500 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:59:27,500 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-13 17:59:27,501 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-13 17:59:27,502 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-13 17:59:27,502 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-13 17:59:27,502 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-13 17:59:27,502 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-13 17:59:27,503 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-13 17:59:27,503 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-13 17:59:27,503 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0552f986eafe304f33f56d4376c7c6a56e2d691e1035259c5c13e13b2a7157c1 [2022-07-13 17:59:27,766 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-13 17:59:27,783 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-13 17:59:27,785 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-13 17:59:27,786 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-13 17:59:27,787 INFO L275 PluginConnector]: CDTParser initialized [2022-07-13 17:59:27,788 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c [2022-07-13 17:59:27,843 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/106633527/5358a0140f1f4cd79199557853314758/FLAG3ffd7b653 [2022-07-13 17:59:28,373 INFO L306 CDTParser]: Found 1 translation units. [2022-07-13 17:59:28,377 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c [2022-07-13 17:59:28,392 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/106633527/5358a0140f1f4cd79199557853314758/FLAG3ffd7b653 [2022-07-13 17:59:28,855 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/106633527/5358a0140f1f4cd79199557853314758 [2022-07-13 17:59:28,857 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-13 17:59:28,858 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-13 17:59:28,861 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-13 17:59:28,861 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-13 17:59:28,864 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-13 17:59:28,864 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:59:28" (1/1) ... [2022-07-13 17:59:28,865 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6fabbefd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:28, skipping insertion in model container [2022-07-13 17:59:28,866 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:59:28" (1/1) ... [2022-07-13 17:59:28,872 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-13 17:59:28,921 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-13 17:59:29,088 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c[15143,15156] [2022-07-13 17:59:29,122 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:59:29,135 INFO L203 MainTranslator]: Completed pre-run [2022-07-13 17:59:29,204 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product50.cil.c[15143,15156] [2022-07-13 17:59:29,214 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:59:29,236 INFO L208 MainTranslator]: Completed translation [2022-07-13 17:59:29,237 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:29 WrapperNode [2022-07-13 17:59:29,237 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-13 17:59:29,238 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-13 17:59:29,238 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-13 17:59:29,238 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-13 17:59:29,246 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:29" (1/1) ... [2022-07-13 17:59:29,271 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:29" (1/1) ... [2022-07-13 17:59:29,305 INFO L137 Inliner]: procedures = 56, calls = 156, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 266 [2022-07-13 17:59:29,306 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-13 17:59:29,307 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-13 17:59:29,307 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-13 17:59:29,307 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-13 17:59:29,315 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:29" (1/1) ... [2022-07-13 17:59:29,315 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:29" (1/1) ... [2022-07-13 17:59:29,317 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:29" (1/1) ... [2022-07-13 17:59:29,318 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:29" (1/1) ... [2022-07-13 17:59:29,323 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:29" (1/1) ... [2022-07-13 17:59:29,328 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:29" (1/1) ... [2022-07-13 17:59:29,330 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:29" (1/1) ... [2022-07-13 17:59:29,332 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-13 17:59:29,333 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-13 17:59:29,333 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-13 17:59:29,334 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-13 17:59:29,334 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:29" (1/1) ... [2022-07-13 17:59:29,340 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:59:29,354 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:59:29,369 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-13 17:59:29,377 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-13 17:59:29,418 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-13 17:59:29,418 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-13 17:59:29,419 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-13 17:59:29,419 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-13 17:59:29,419 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-13 17:59:29,419 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-13 17:59:29,420 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-13 17:59:29,423 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-13 17:59:29,423 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-13 17:59:29,423 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:59:29,423 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:59:29,423 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-13 17:59:29,424 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-13 17:59:29,424 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-13 17:59:29,424 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-13 17:59:29,424 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-13 17:59:29,424 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-13 17:59:29,424 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-13 17:59:29,520 INFO L234 CfgBuilder]: Building ICFG [2022-07-13 17:59:29,521 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-13 17:59:29,837 INFO L275 CfgBuilder]: Performing block encoding [2022-07-13 17:59:29,843 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-13 17:59:29,844 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-13 17:59:29,845 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:59:29 BoogieIcfgContainer [2022-07-13 17:59:29,863 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-13 17:59:29,865 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-13 17:59:29,865 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-13 17:59:29,868 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-13 17:59:29,869 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.07 05:59:28" (1/3) ... [2022-07-13 17:59:29,869 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@42c82067 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:59:29, skipping insertion in model container [2022-07-13 17:59:29,869 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:29" (2/3) ... [2022-07-13 17:59:29,870 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@42c82067 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:59:29, skipping insertion in model container [2022-07-13 17:59:29,870 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:59:29" (3/3) ... [2022-07-13 17:59:29,871 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product50.cil.c [2022-07-13 17:59:29,884 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-13 17:59:29,884 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-13 17:59:29,941 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-13 17:59:29,950 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@13bb7e0c, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@55eabc6c [2022-07-13 17:59:29,951 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-13 17:59:29,956 INFO L276 IsEmpty]: Start isEmpty. Operand has 89 states, 69 states have (on average 1.391304347826087) internal successors, (96), 77 states have internal predecessors, (96), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-07-13 17:59:29,965 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-13 17:59:29,966 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:29,966 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:29,968 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:29,973 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:29,973 INFO L85 PathProgramCache]: Analyzing trace with hash 497933795, now seen corresponding path program 1 times [2022-07-13 17:59:29,980 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:29,981 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [816256833] [2022-07-13 17:59:29,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:29,982 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:30,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:30,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-13 17:59:30,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:30,224 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:30,226 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:30,226 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [816256833] [2022-07-13 17:59:30,226 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [816256833] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:30,227 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:30,228 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-13 17:59:30,229 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [235775309] [2022-07-13 17:59:30,230 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:30,234 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-13 17:59:30,234 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:30,263 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-13 17:59:30,264 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:59:30,266 INFO L87 Difference]: Start difference. First operand has 89 states, 69 states have (on average 1.391304347826087) internal successors, (96), 77 states have internal predecessors, (96), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:30,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:30,296 INFO L93 Difference]: Finished difference Result 170 states and 231 transitions. [2022-07-13 17:59:30,297 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-13 17:59:30,298 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-13 17:59:30,299 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:30,309 INFO L225 Difference]: With dead ends: 170 [2022-07-13 17:59:30,310 INFO L226 Difference]: Without dead ends: 80 [2022-07-13 17:59:30,314 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:59:30,318 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:30,319 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:30,333 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2022-07-13 17:59:30,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2022-07-13 17:59:30,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 69 states have internal predecessors, (82), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-07-13 17:59:30,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 103 transitions. [2022-07-13 17:59:30,383 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 103 transitions. Word has length 25 [2022-07-13 17:59:30,383 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:30,384 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 103 transitions. [2022-07-13 17:59:30,384 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:30,385 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 103 transitions. [2022-07-13 17:59:30,388 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-13 17:59:30,389 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:30,389 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:30,390 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-13 17:59:30,390 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:30,392 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:30,392 INFO L85 PathProgramCache]: Analyzing trace with hash -470356708, now seen corresponding path program 1 times [2022-07-13 17:59:30,393 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:30,393 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1038373794] [2022-07-13 17:59:30,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:30,394 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:30,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:30,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 17:59:30,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:30,490 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:30,490 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:30,490 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1038373794] [2022-07-13 17:59:30,490 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1038373794] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:30,491 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:30,491 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 17:59:30,491 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [265874987] [2022-07-13 17:59:30,491 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:30,492 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:59:30,493 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:30,493 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:59:30,493 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:59:30,494 INFO L87 Difference]: Start difference. First operand 80 states and 103 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:30,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:30,511 INFO L93 Difference]: Finished difference Result 125 states and 161 transitions. [2022-07-13 17:59:30,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:59:30,513 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-13 17:59:30,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:30,517 INFO L225 Difference]: With dead ends: 125 [2022-07-13 17:59:30,518 INFO L226 Difference]: Without dead ends: 71 [2022-07-13 17:59:30,521 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:59:30,523 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 13 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 163 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:30,523 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 163 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:30,524 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2022-07-13 17:59:30,530 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2022-07-13 17:59:30,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 56 states have (on average 1.3392857142857142) internal successors, (75), 63 states have internal predecessors, (75), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-07-13 17:59:30,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 91 transitions. [2022-07-13 17:59:30,534 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 91 transitions. Word has length 26 [2022-07-13 17:59:30,535 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:30,535 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 91 transitions. [2022-07-13 17:59:30,535 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:30,536 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 91 transitions. [2022-07-13 17:59:30,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-07-13 17:59:30,538 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:30,538 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:30,538 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-13 17:59:30,539 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:30,539 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:30,539 INFO L85 PathProgramCache]: Analyzing trace with hash 1793997224, now seen corresponding path program 1 times [2022-07-13 17:59:30,540 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:30,540 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1436420340] [2022-07-13 17:59:30,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:30,540 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:30,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:30,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:59:30,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:30,612 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:30,612 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:30,613 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1436420340] [2022-07-13 17:59:30,613 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1436420340] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:30,613 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:30,613 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:59:30,613 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1877657131] [2022-07-13 17:59:30,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:30,614 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:59:30,614 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:30,615 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:59:30,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:59:30,615 INFO L87 Difference]: Start difference. First operand 71 states and 91 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:30,665 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:30,665 INFO L93 Difference]: Finished difference Result 135 states and 176 transitions. [2022-07-13 17:59:30,665 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 17:59:30,666 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-07-13 17:59:30,666 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:30,667 INFO L225 Difference]: With dead ends: 135 [2022-07-13 17:59:30,667 INFO L226 Difference]: Without dead ends: 71 [2022-07-13 17:59:30,668 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:59:30,669 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 116 mSDsluCounter, 136 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 220 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:30,669 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 220 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:30,670 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2022-07-13 17:59:30,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2022-07-13 17:59:30,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-07-13 17:59:30,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 90 transitions. [2022-07-13 17:59:30,677 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 90 transitions. Word has length 31 [2022-07-13 17:59:30,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:30,678 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 90 transitions. [2022-07-13 17:59:30,678 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:30,678 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 90 transitions. [2022-07-13 17:59:30,679 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-07-13 17:59:30,679 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:30,680 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:30,680 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-13 17:59:30,680 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:30,681 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:30,681 INFO L85 PathProgramCache]: Analyzing trace with hash -668349169, now seen corresponding path program 1 times [2022-07-13 17:59:30,681 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:30,681 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1797012371] [2022-07-13 17:59:30,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:30,682 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:30,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:30,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:59:30,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:30,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:59:30,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:30,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-07-13 17:59:30,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:30,746 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:30,746 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:30,747 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1797012371] [2022-07-13 17:59:30,747 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1797012371] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:30,747 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:30,747 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:59:30,748 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [550672945] [2022-07-13 17:59:30,748 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:30,748 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:59:30,748 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:30,749 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:59:30,749 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:59:30,749 INFO L87 Difference]: Start difference. First operand 71 states and 90 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-13 17:59:30,892 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:30,892 INFO L93 Difference]: Finished difference Result 213 states and 271 transitions. [2022-07-13 17:59:30,893 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:59:30,893 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2022-07-13 17:59:30,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:30,898 INFO L225 Difference]: With dead ends: 213 [2022-07-13 17:59:30,898 INFO L226 Difference]: Without dead ends: 149 [2022-07-13 17:59:30,901 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-07-13 17:59:30,909 INFO L413 NwaCegarLoop]: 135 mSDtfsCounter, 173 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 175 SdHoareTripleChecker+Valid, 311 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:30,910 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [175 Valid, 311 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:59:30,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149 states. [2022-07-13 17:59:30,930 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149 to 143. [2022-07-13 17:59:30,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 143 states, 112 states have (on average 1.2767857142857142) internal successors, (143), 119 states have internal predecessors, (143), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2022-07-13 17:59:30,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 143 states to 143 states and 176 transitions. [2022-07-13 17:59:30,932 INFO L78 Accepts]: Start accepts. Automaton has 143 states and 176 transitions. Word has length 41 [2022-07-13 17:59:30,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:30,932 INFO L495 AbstractCegarLoop]: Abstraction has 143 states and 176 transitions. [2022-07-13 17:59:30,933 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-07-13 17:59:30,933 INFO L276 IsEmpty]: Start isEmpty. Operand 143 states and 176 transitions. [2022-07-13 17:59:30,934 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-07-13 17:59:30,934 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:30,934 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:30,935 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-13 17:59:30,935 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:30,935 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:30,935 INFO L85 PathProgramCache]: Analyzing trace with hash 103943489, now seen corresponding path program 1 times [2022-07-13 17:59:30,936 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:30,936 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [973255125] [2022-07-13 17:59:30,936 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:30,937 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:30,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:31,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:59:31,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:31,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-13 17:59:31,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:31,077 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:31,078 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:31,078 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [973255125] [2022-07-13 17:59:31,078 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [973255125] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:31,078 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:31,079 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 17:59:31,079 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [923199894] [2022-07-13 17:59:31,079 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:31,080 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 17:59:31,080 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:31,085 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 17:59:31,085 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:59:31,085 INFO L87 Difference]: Start difference. First operand 143 states and 176 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:59:31,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:31,244 INFO L93 Difference]: Finished difference Result 301 states and 377 transitions. [2022-07-13 17:59:31,244 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-13 17:59:31,245 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-07-13 17:59:31,245 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:31,248 INFO L225 Difference]: With dead ends: 301 [2022-07-13 17:59:31,248 INFO L226 Difference]: Without dead ends: 165 [2022-07-13 17:59:31,250 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=97, Unknown=0, NotChecked=0, Total=132 [2022-07-13 17:59:31,251 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 109 mSDsluCounter, 329 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 112 SdHoareTripleChecker+Valid, 423 SdHoareTripleChecker+Invalid, 167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:31,251 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [112 Valid, 423 Invalid, 167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:59:31,252 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2022-07-13 17:59:31,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 145. [2022-07-13 17:59:31,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 145 states, 114 states have (on average 1.2719298245614035) internal successors, (145), 121 states have internal predecessors, (145), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2022-07-13 17:59:31,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 145 states to 145 states and 178 transitions. [2022-07-13 17:59:31,287 INFO L78 Accepts]: Start accepts. Automaton has 145 states and 178 transitions. Word has length 45 [2022-07-13 17:59:31,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:31,287 INFO L495 AbstractCegarLoop]: Abstraction has 145 states and 178 transitions. [2022-07-13 17:59:31,287 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:59:31,287 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 178 transitions. [2022-07-13 17:59:31,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-07-13 17:59:31,288 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:31,289 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:31,289 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-13 17:59:31,289 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:31,289 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:31,289 INFO L85 PathProgramCache]: Analyzing trace with hash 921591939, now seen corresponding path program 1 times [2022-07-13 17:59:31,290 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:31,290 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1479334679] [2022-07-13 17:59:31,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:31,290 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:31,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:31,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:59:31,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:31,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-13 17:59:31,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:31,379 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:31,379 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:31,379 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1479334679] [2022-07-13 17:59:31,379 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1479334679] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:31,379 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:31,380 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:59:31,380 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1504511605] [2022-07-13 17:59:31,380 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:31,380 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:59:31,381 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:31,381 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:59:31,381 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:59:31,381 INFO L87 Difference]: Start difference. First operand 145 states and 178 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:59:31,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:31,498 INFO L93 Difference]: Finished difference Result 291 states and 361 transitions. [2022-07-13 17:59:31,499 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:59:31,499 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-07-13 17:59:31,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:31,504 INFO L225 Difference]: With dead ends: 291 [2022-07-13 17:59:31,504 INFO L226 Difference]: Without dead ends: 153 [2022-07-13 17:59:31,505 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-07-13 17:59:31,507 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 64 mSDsluCounter, 282 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 376 SdHoareTripleChecker+Invalid, 122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:31,507 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 376 Invalid, 122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:59:31,508 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153 states. [2022-07-13 17:59:31,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153 to 148. [2022-07-13 17:59:31,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 117 states have (on average 1.264957264957265) internal successors, (148), 124 states have internal predecessors, (148), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2022-07-13 17:59:31,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 181 transitions. [2022-07-13 17:59:31,532 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 181 transitions. Word has length 45 [2022-07-13 17:59:31,532 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:31,533 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 181 transitions. [2022-07-13 17:59:31,533 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:59:31,533 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 181 transitions. [2022-07-13 17:59:31,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-07-13 17:59:31,538 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:31,538 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:31,538 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-13 17:59:31,538 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:31,539 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:31,539 INFO L85 PathProgramCache]: Analyzing trace with hash 322798207, now seen corresponding path program 1 times [2022-07-13 17:59:31,539 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:31,540 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1628148801] [2022-07-13 17:59:31,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:31,540 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:31,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:31,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:59:31,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:31,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-13 17:59:31,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:31,628 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:31,628 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:31,628 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1628148801] [2022-07-13 17:59:31,629 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1628148801] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:31,629 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:31,629 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:59:31,629 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [963930352] [2022-07-13 17:59:31,629 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:31,630 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:59:31,630 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:31,631 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:59:31,631 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:59:31,631 INFO L87 Difference]: Start difference. First operand 148 states and 181 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:59:31,830 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:31,831 INFO L93 Difference]: Finished difference Result 416 states and 530 transitions. [2022-07-13 17:59:31,832 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:59:31,832 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2022-07-13 17:59:31,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:31,835 INFO L225 Difference]: With dead ends: 416 [2022-07-13 17:59:31,835 INFO L226 Difference]: Without dead ends: 275 [2022-07-13 17:59:31,836 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:59:31,837 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 204 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 143 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 210 SdHoareTripleChecker+Valid, 314 SdHoareTripleChecker+Invalid, 193 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:31,837 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [210 Valid, 314 Invalid, 193 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:59:31,838 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 275 states. [2022-07-13 17:59:31,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 275 to 267. [2022-07-13 17:59:31,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 267 states, 208 states have (on average 1.2548076923076923) internal successors, (261), 219 states have internal predecessors, (261), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (44), 29 states have call predecessors, (44), 29 states have call successors, (44) [2022-07-13 17:59:31,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 267 states to 267 states and 334 transitions. [2022-07-13 17:59:31,856 INFO L78 Accepts]: Start accepts. Automaton has 267 states and 334 transitions. Word has length 45 [2022-07-13 17:59:31,856 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:31,856 INFO L495 AbstractCegarLoop]: Abstraction has 267 states and 334 transitions. [2022-07-13 17:59:31,857 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-07-13 17:59:31,857 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 334 transitions. [2022-07-13 17:59:31,857 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-07-13 17:59:31,857 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:31,858 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:31,858 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-13 17:59:31,858 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:31,858 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:31,858 INFO L85 PathProgramCache]: Analyzing trace with hash -916701465, now seen corresponding path program 1 times [2022-07-13 17:59:31,859 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:31,859 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2032040027] [2022-07-13 17:59:31,859 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:31,859 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:31,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:31,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:59:31,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:31,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:59:31,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:31,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-07-13 17:59:31,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:31,941 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:31,941 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:31,941 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2032040027] [2022-07-13 17:59:31,942 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2032040027] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:31,942 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:31,942 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:59:31,942 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1821695428] [2022-07-13 17:59:31,942 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:31,943 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:59:31,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:31,944 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:59:31,944 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:59:31,944 INFO L87 Difference]: Start difference. First operand 267 states and 334 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:59:32,078 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:32,079 INFO L93 Difference]: Finished difference Result 530 states and 663 transitions. [2022-07-13 17:59:32,079 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:59:32,080 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-07-13 17:59:32,080 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:32,082 INFO L225 Difference]: With dead ends: 530 [2022-07-13 17:59:32,082 INFO L226 Difference]: Without dead ends: 270 [2022-07-13 17:59:32,083 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-07-13 17:59:32,083 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 111 mSDsluCounter, 253 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 340 SdHoareTripleChecker+Invalid, 159 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:32,084 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [115 Valid, 340 Invalid, 159 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:59:32,085 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2022-07-13 17:59:32,097 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 265. [2022-07-13 17:59:32,098 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 206 states have (on average 1.2475728155339805) internal successors, (257), 217 states have internal predecessors, (257), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (44), 29 states have call predecessors, (44), 29 states have call successors, (44) [2022-07-13 17:59:32,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 330 transitions. [2022-07-13 17:59:32,100 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 330 transitions. Word has length 47 [2022-07-13 17:59:32,100 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:32,100 INFO L495 AbstractCegarLoop]: Abstraction has 265 states and 330 transitions. [2022-07-13 17:59:32,100 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:59:32,100 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 330 transitions. [2022-07-13 17:59:32,101 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-07-13 17:59:32,101 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:32,101 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:32,102 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-13 17:59:32,102 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:32,102 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:32,102 INFO L85 PathProgramCache]: Analyzing trace with hash 1637594841, now seen corresponding path program 1 times [2022-07-13 17:59:32,103 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:32,103 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1469610690] [2022-07-13 17:59:32,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:32,103 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:32,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:32,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:59:32,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-13 17:59:32,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,160 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:32,161 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:32,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1469610690] [2022-07-13 17:59:32,161 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1469610690] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:32,161 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:32,161 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 17:59:32,162 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1496299267] [2022-07-13 17:59:32,162 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:32,162 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 17:59:32,163 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:32,163 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 17:59:32,163 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:59:32,164 INFO L87 Difference]: Start difference. First operand 265 states and 330 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:59:32,434 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:32,434 INFO L93 Difference]: Finished difference Result 525 states and 658 transitions. [2022-07-13 17:59:32,435 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-07-13 17:59:32,435 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2022-07-13 17:59:32,435 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:32,437 INFO L225 Difference]: With dead ends: 525 [2022-07-13 17:59:32,437 INFO L226 Difference]: Without dead ends: 314 [2022-07-13 17:59:32,438 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=87, Invalid=185, Unknown=0, NotChecked=0, Total=272 [2022-07-13 17:59:32,439 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 208 mSDsluCounter, 374 mSDsCounter, 0 mSdLazyCounter, 285 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 212 SdHoareTripleChecker+Valid, 524 SdHoareTripleChecker+Invalid, 333 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 285 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:32,439 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [212 Valid, 524 Invalid, 333 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 285 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:59:32,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 314 states. [2022-07-13 17:59:32,451 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 314 to 301. [2022-07-13 17:59:32,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 236 states have (on average 1.228813559322034) internal successors, (290), 250 states have internal predecessors, (290), 32 states have call successors, (32), 28 states have call predecessors, (32), 32 states have return successors, (44), 32 states have call predecessors, (44), 32 states have call successors, (44) [2022-07-13 17:59:32,454 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 366 transitions. [2022-07-13 17:59:32,454 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 366 transitions. Word has length 49 [2022-07-13 17:59:32,454 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:32,454 INFO L495 AbstractCegarLoop]: Abstraction has 301 states and 366 transitions. [2022-07-13 17:59:32,455 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-07-13 17:59:32,455 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 366 transitions. [2022-07-13 17:59:32,455 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-07-13 17:59:32,456 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:32,456 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:32,456 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-13 17:59:32,456 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:32,456 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:32,457 INFO L85 PathProgramCache]: Analyzing trace with hash -32680003, now seen corresponding path program 1 times [2022-07-13 17:59:32,457 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:32,457 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [972736653] [2022-07-13 17:59:32,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:32,457 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:32,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:32,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:59:32,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:59:32,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-13 17:59:32,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,542 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:32,542 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:32,542 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [972736653] [2022-07-13 17:59:32,543 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [972736653] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:32,543 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:32,543 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-07-13 17:59:32,543 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [866975342] [2022-07-13 17:59:32,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:32,544 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-07-13 17:59:32,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:32,544 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-07-13 17:59:32,544 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2022-07-13 17:59:32,544 INFO L87 Difference]: Start difference. First operand 301 states and 366 transitions. Second operand has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:59:32,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:32,771 INFO L93 Difference]: Finished difference Result 550 states and 676 transitions. [2022-07-13 17:59:32,771 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-13 17:59:32,772 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-07-13 17:59:32,772 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:32,773 INFO L225 Difference]: With dead ends: 550 [2022-07-13 17:59:32,774 INFO L226 Difference]: Without dead ends: 305 [2022-07-13 17:59:32,774 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=156, Unknown=0, NotChecked=0, Total=210 [2022-07-13 17:59:32,775 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 164 mSDsluCounter, 356 mSDsCounter, 0 mSdLazyCounter, 304 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 441 SdHoareTripleChecker+Invalid, 350 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 304 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:32,775 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [166 Valid, 441 Invalid, 350 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 304 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:59:32,776 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2022-07-13 17:59:32,788 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 301. [2022-07-13 17:59:32,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 236 states have (on average 1.2245762711864407) internal successors, (289), 250 states have internal predecessors, (289), 32 states have call successors, (32), 28 states have call predecessors, (32), 32 states have return successors, (44), 32 states have call predecessors, (44), 32 states have call successors, (44) [2022-07-13 17:59:32,790 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 365 transitions. [2022-07-13 17:59:32,791 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 365 transitions. Word has length 51 [2022-07-13 17:59:32,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:32,791 INFO L495 AbstractCegarLoop]: Abstraction has 301 states and 365 transitions. [2022-07-13 17:59:32,791 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.666666666666667) internal successors, (42), 7 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:59:32,791 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 365 transitions. [2022-07-13 17:59:32,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-07-13 17:59:32,792 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:32,792 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:32,792 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-13 17:59:32,793 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:32,793 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:32,793 INFO L85 PathProgramCache]: Analyzing trace with hash -251534721, now seen corresponding path program 1 times [2022-07-13 17:59:32,793 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:32,793 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [576764675] [2022-07-13 17:59:32,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:32,794 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:32,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:32,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:59:32,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:59:32,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-13 17:59:32,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:32,833 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:32,834 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:32,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [576764675] [2022-07-13 17:59:32,834 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [576764675] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:32,834 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:32,834 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:59:32,834 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [626827087] [2022-07-13 17:59:32,834 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:32,835 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:59:32,835 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:32,835 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:59:32,836 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:59:32,836 INFO L87 Difference]: Start difference. First operand 301 states and 365 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:59:32,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:32,965 INFO L93 Difference]: Finished difference Result 521 states and 638 transitions. [2022-07-13 17:59:32,965 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:59:32,966 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-07-13 17:59:32,966 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:32,967 INFO L225 Difference]: With dead ends: 521 [2022-07-13 17:59:32,967 INFO L226 Difference]: Without dead ends: 276 [2022-07-13 17:59:32,968 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-07-13 17:59:32,969 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 133 mSDsluCounter, 223 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 180 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:32,969 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [135 Valid, 316 Invalid, 180 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:59:32,970 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 276 states. [2022-07-13 17:59:32,983 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 276 to 272. [2022-07-13 17:59:32,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 272 states, 214 states have (on average 1.2242990654205608) internal successors, (262), 227 states have internal predecessors, (262), 29 states have call successors, (29), 25 states have call predecessors, (29), 28 states have return successors, (37), 28 states have call predecessors, (37), 29 states have call successors, (37) [2022-07-13 17:59:32,985 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 272 states to 272 states and 328 transitions. [2022-07-13 17:59:32,985 INFO L78 Accepts]: Start accepts. Automaton has 272 states and 328 transitions. Word has length 51 [2022-07-13 17:59:32,986 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:32,986 INFO L495 AbstractCegarLoop]: Abstraction has 272 states and 328 transitions. [2022-07-13 17:59:32,986 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:59:32,986 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 328 transitions. [2022-07-13 17:59:32,987 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2022-07-13 17:59:32,987 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:32,988 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:32,988 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-07-13 17:59:32,988 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:32,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:32,988 INFO L85 PathProgramCache]: Analyzing trace with hash -614822540, now seen corresponding path program 1 times [2022-07-13 17:59:32,989 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:32,989 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [5155131] [2022-07-13 17:59:32,989 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:32,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:33,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:33,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:33,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:33,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:59:33,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:33,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 17:59:33,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:33,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-13 17:59:33,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:33,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-07-13 17:59:33,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:33,093 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 18 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-13 17:59:33,093 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:33,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [5155131] [2022-07-13 17:59:33,094 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [5155131] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:59:33,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [114697120] [2022-07-13 17:59:33,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:33,094 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:59:33,095 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:59:33,099 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:59:33,131 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-13 17:59:33,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:33,225 INFO L263 TraceCheckSpWp]: Trace formula consists of 438 conjuncts, 13 conjunts are in the unsatisfiable core [2022-07-13 17:59:33,231 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:59:33,475 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 3 proven. 12 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-07-13 17:59:33,477 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-13 17:59:33,685 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-07-13 17:59:33,686 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [114697120] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-13 17:59:33,686 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-13 17:59:33,686 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 9] total 19 [2022-07-13 17:59:33,686 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1038447056] [2022-07-13 17:59:33,686 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-13 17:59:33,687 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2022-07-13 17:59:33,687 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:33,688 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2022-07-13 17:59:33,688 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=60, Invalid=282, Unknown=0, NotChecked=0, Total=342 [2022-07-13 17:59:33,688 INFO L87 Difference]: Start difference. First operand 272 states and 328 transitions. Second operand has 19 states, 19 states have (on average 6.947368421052632) internal successors, (132), 14 states have internal predecessors, (132), 7 states have call successors, (17), 10 states have call predecessors, (17), 8 states have return successors, (15), 8 states have call predecessors, (15), 7 states have call successors, (15) [2022-07-13 17:59:34,992 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:34,993 INFO L93 Difference]: Finished difference Result 820 states and 1060 transitions. [2022-07-13 17:59:34,993 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-07-13 17:59:34,993 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 19 states have (on average 6.947368421052632) internal successors, (132), 14 states have internal predecessors, (132), 7 states have call successors, (17), 10 states have call predecessors, (17), 8 states have return successors, (15), 8 states have call predecessors, (15), 7 states have call successors, (15) Word has length 81 [2022-07-13 17:59:34,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:34,994 INFO L225 Difference]: With dead ends: 820 [2022-07-13 17:59:34,994 INFO L226 Difference]: Without dead ends: 0 [2022-07-13 17:59:34,998 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 235 GetRequests, 167 SyntacticMatches, 1 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1194 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=927, Invalid=3765, Unknown=0, NotChecked=0, Total=4692 [2022-07-13 17:59:34,998 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 932 mSDsluCounter, 728 mSDsCounter, 0 mSdLazyCounter, 1012 mSolverCounterSat, 392 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 932 SdHoareTripleChecker+Valid, 860 SdHoareTripleChecker+Invalid, 1404 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 392 IncrementalHoareTripleChecker+Valid, 1012 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:34,999 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [932 Valid, 860 Invalid, 1404 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [392 Valid, 1012 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-07-13 17:59:34,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-13 17:59:34,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-13 17:59:34,999 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 17:59:35,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-13 17:59:35,000 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 81 [2022-07-13 17:59:35,000 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:35,000 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 17:59:35,001 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 19 states have (on average 6.947368421052632) internal successors, (132), 14 states have internal predecessors, (132), 7 states have call successors, (17), 10 states have call predecessors, (17), 8 states have return successors, (15), 8 states have call predecessors, (15), 7 states have call successors, (15) [2022-07-13 17:59:35,001 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-13 17:59:35,001 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-13 17:59:35,003 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-13 17:59:35,034 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-13 17:59:35,218 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-13 17:59:35,220 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-13 17:59:38,867 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 806 812) no Hoare annotation was computed. [2022-07-13 17:59:38,867 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 806 812) the Hoare annotation is: true [2022-07-13 17:59:38,868 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 486 497) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= |old(~methaneLevelCritical~0)| 0))) (let ((.cse0 (not .cse6)) (.cse5 (not (= ~pumpRunning~0 0))) (.cse7 (not .cse1)) (.cse2 (not (= ~pumpRunning~0 1))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse3 .cse4) (or .cse6 .cse7 .cse2 .cse3 .cse4)))) [2022-07-13 17:59:38,868 INFO L899 garLoopResultBuilder]: For program point L490-1(lines 486 497) no Hoare annotation was computed. [2022-07-13 17:59:38,868 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 486 497) no Hoare annotation was computed. [2022-07-13 17:59:38,868 INFO L899 garLoopResultBuilder]: For program point L704(line 704) no Hoare annotation was computed. [2022-07-13 17:59:38,868 INFO L895 garLoopResultBuilder]: At program point L535(lines 530 538) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse6 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse3 (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~3#1|)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= ~pumpRunning~0 1)) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (= ~methaneLevelCritical~0 0)) (.cse1 (= 0 ~systemActive~0)) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= |timeShift_getWaterLevel_#res#1| 1)) (let ((.cse4 (<= ~waterLevel~0 1)) (.cse5 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7) .cse1 .cse8 (and .cse3 .cse9 .cse4 .cse5 .cse6))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse3 .cse9 .cse10 .cse6)) (or .cse0 (and .cse3 .cse10 .cse7) .cse1 .cse8 (not (<= 2 |old(~waterLevel~0)|))) (or .cse11 .cse2 .cse1 .cse8) (or .cse0 .cse11 .cse1 .cse8))) [2022-07-13 17:59:38,868 INFO L895 garLoopResultBuilder]: At program point L878(lines 873 880) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 1)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse0 .cse1))) [2022-07-13 17:59:38,868 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 782 805) no Hoare annotation was computed. [2022-07-13 17:59:38,868 INFO L899 garLoopResultBuilder]: For program point L965(lines 965 969) no Hoare annotation was computed. [2022-07-13 17:59:38,868 INFO L899 garLoopResultBuilder]: For program point L965-2(lines 965 969) no Hoare annotation was computed. [2022-07-13 17:59:38,868 INFO L895 garLoopResultBuilder]: At program point L705(lines 700 707) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1))) [2022-07-13 17:59:38,869 INFO L895 garLoopResultBuilder]: At program point L854(line 854) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1))) [2022-07-13 17:59:38,869 INFO L899 garLoopResultBuilder]: For program point L466(lines 466 470) no Hoare annotation was computed. [2022-07-13 17:59:38,869 INFO L895 garLoopResultBuilder]: At program point L466-2(lines 462 473) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1))) [2022-07-13 17:59:38,869 INFO L899 garLoopResultBuilder]: For program point L429(lines 429 449) no Hoare annotation was computed. [2022-07-13 17:59:38,869 INFO L895 garLoopResultBuilder]: At program point L859(line 859) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1))) [2022-07-13 17:59:38,869 INFO L895 garLoopResultBuilder]: At program point L859-1(lines 840 864) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 1)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4) (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse5 (<= ~waterLevel~0 1)) (.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse5 .cse6 .cse4) (not (= |old(~pumpRunning~0)| 1)) (and .cse7 .cse5 .cse6) .cse1 .cse2)) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 (and .cse7 .cse3) .cse1))) [2022-07-13 17:59:38,869 INFO L899 garLoopResultBuilder]: For program point L793-1(lines 793 799) no Hoare annotation was computed. [2022-07-13 17:59:38,869 INFO L895 garLoopResultBuilder]: At program point L558(lines 553 561) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1))) [2022-07-13 17:59:38,869 INFO L895 garLoopResultBuilder]: At program point L971(lines 956 974) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1))) [2022-07-13 17:59:38,869 INFO L895 garLoopResultBuilder]: At program point L897(lines 892 900) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~3#1|) (= |timeShift_isPumpRunning_#res#1| 1) (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (or (not (= |old(~pumpRunning~0)| 1)) .cse1 .cse2) (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2022-07-13 17:59:38,870 INFO L899 garLoopResultBuilder]: For program point L439(lines 439 445) no Hoare annotation was computed. [2022-07-13 17:59:38,870 INFO L899 garLoopResultBuilder]: For program point L435(lines 435 448) no Hoare annotation was computed. [2022-07-13 17:59:38,870 INFO L895 garLoopResultBuilder]: At program point L435-1(lines 420 452) the Hoare annotation is: (let ((.cse7 (= ~methaneLevelCritical~0 |timeShift___utac_acc__Specification3_spec__1_~tmp~3#1|)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= ~pumpRunning~0 1))) (let ((.cse8 (= ~pumpRunning~0 0)) (.cse2 (not (= |old(~pumpRunning~0)| 1))) (.cse9 (<= ~waterLevel~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (and (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1) (<= |timeShift_getWaterLevel_#res#1| 1))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and .cse7 (<= 2 ~waterLevel~0) .cse10 .cse12)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 (and .cse7 .cse8 .cse9 .cse10) .cse3 .cse4) (let ((.cse11 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse7 .cse8 .cse9 .cse11) .cse2 .cse3 .cse4 (and .cse7 .cse9 .cse11 .cse12))) (or .cse5 .cse0 .cse1 .cse6 .cse3 .cse4)))) [2022-07-13 17:59:38,870 INFO L899 garLoopResultBuilder]: For program point L786-1(lines 785 804) no Hoare annotation was computed. [2022-07-13 17:59:38,870 INFO L899 garLoopResultBuilder]: For program point L848(lines 848 856) no Hoare annotation was computed. [2022-07-13 17:59:38,870 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 782 805) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 1)) .cse0 .cse1 (and .cse2 (= ~pumpRunning~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse2) .cse0 .cse1))) [2022-07-13 17:59:38,870 INFO L899 garLoopResultBuilder]: For program point L844(lines 844 861) no Hoare annotation was computed. [2022-07-13 17:59:38,870 INFO L895 garLoopResultBuilder]: At program point L427(line 427) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 1)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4) (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse5 (<= ~waterLevel~0 1)) (.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse5 .cse6 .cse4) (not (= |old(~pumpRunning~0)| 1)) (and .cse7 .cse5 .cse6) .cse1 .cse2)) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 (and .cse7 .cse3) .cse1))) [2022-07-13 17:59:38,870 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 782 805) no Hoare annotation was computed. [2022-07-13 17:59:38,870 INFO L899 garLoopResultBuilder]: For program point L427-1(line 427) no Hoare annotation was computed. [2022-07-13 17:59:38,870 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 704) no Hoare annotation was computed. [2022-07-13 17:59:38,871 INFO L899 garLoopResultBuilder]: For program point L576(line 576) no Hoare annotation was computed. [2022-07-13 17:59:38,871 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 565 594) no Hoare annotation was computed. [2022-07-13 17:59:38,871 INFO L902 garLoopResultBuilder]: At program point L575-2(lines 575 589) the Hoare annotation is: true [2022-07-13 17:59:38,871 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 565 594) the Hoare annotation is: true [2022-07-13 17:59:38,871 INFO L902 garLoopResultBuilder]: At program point L571(line 571) the Hoare annotation is: true [2022-07-13 17:59:38,871 INFO L899 garLoopResultBuilder]: For program point L571-1(line 571) no Hoare annotation was computed. [2022-07-13 17:59:38,871 INFO L902 garLoopResultBuilder]: At program point L590(lines 565 594) the Hoare annotation is: true [2022-07-13 17:59:38,871 INFO L899 garLoopResultBuilder]: For program point L586(line 586) no Hoare annotation was computed. [2022-07-13 17:59:38,871 INFO L899 garLoopResultBuilder]: For program point L579(lines 579 583) no Hoare annotation was computed. [2022-07-13 17:59:38,871 INFO L902 garLoopResultBuilder]: At program point L579-1(lines 579 583) the Hoare annotation is: true [2022-07-13 17:59:38,871 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 498 506) the Hoare annotation is: true [2022-07-13 17:59:38,871 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 498 506) no Hoare annotation was computed. [2022-07-13 17:59:38,871 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 498 506) no Hoare annotation was computed. [2022-07-13 17:59:38,872 INFO L899 garLoopResultBuilder]: For program point L758(lines 758 762) no Hoare annotation was computed. [2022-07-13 17:59:38,872 INFO L895 garLoopResultBuilder]: At program point L758-2(lines 750 763) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)))) [2022-07-13 17:59:38,872 INFO L899 garLoopResultBuilder]: For program point L721(lines 720 767) no Hoare annotation was computed. [2022-07-13 17:59:38,872 INFO L899 garLoopResultBuilder]: For program point L750(lines 750 763) no Hoare annotation was computed. [2022-07-13 17:59:38,872 INFO L899 garLoopResultBuilder]: For program point L651(lines 651 658) no Hoare annotation was computed. [2022-07-13 17:59:38,872 INFO L899 garLoopResultBuilder]: For program point L651-2(lines 651 658) no Hoare annotation was computed. [2022-07-13 17:59:38,872 INFO L895 garLoopResultBuilder]: At program point L680(lines 676 682) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:59:38,872 INFO L895 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)))) [2022-07-13 17:59:38,872 INFO L902 garLoopResultBuilder]: At program point L771(lines 710 775) the Hoare annotation is: true [2022-07-13 17:59:38,872 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-13 17:59:38,872 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-13 17:59:38,872 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-13 17:59:38,872 INFO L902 garLoopResultBuilder]: At program point L635(lines 628 637) the Hoare annotation is: true [2022-07-13 17:59:38,873 INFO L899 garLoopResultBuilder]: For program point L730(lines 730 736) no Hoare annotation was computed. [2022-07-13 17:59:38,873 INFO L899 garLoopResultBuilder]: For program point L730-1(lines 730 736) no Hoare annotation was computed. [2022-07-13 17:59:38,873 INFO L902 garLoopResultBuilder]: At program point L660(lines 641 663) the Hoare annotation is: true [2022-07-13 17:59:38,873 INFO L899 garLoopResultBuilder]: For program point L722(lines 722 726) no Hoare annotation was computed. [2022-07-13 17:59:38,873 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-13 17:59:38,879 INFO L895 garLoopResultBuilder]: At program point L768(lines 719 769) the Hoare annotation is: false [2022-07-13 17:59:38,879 INFO L895 garLoopResultBuilder]: At program point L624(lines 620 626) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~4#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:59:38,879 INFO L899 garLoopResultBuilder]: For program point L740(lines 740 746) no Hoare annotation was computed. [2022-07-13 17:59:38,880 INFO L899 garLoopResultBuilder]: For program point L740-1(lines 740 746) no Hoare annotation was computed. [2022-07-13 17:59:38,880 INFO L895 garLoopResultBuilder]: At program point L765(lines 720 767) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3 (= ~pumpRunning~0 1)))) [2022-07-13 17:59:38,880 INFO L895 garLoopResultBuilder]: At program point L732(line 732) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3 (= ~pumpRunning~0 1)))) [2022-07-13 17:59:38,880 INFO L895 garLoopResultBuilder]: At program point L695(lines 690 698) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:59:38,880 INFO L895 garLoopResultBuilder]: At program point L980(lines 975 982) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)))) [2022-07-13 17:59:38,881 INFO L895 garLoopResultBuilder]: At program point L687(lines 683 689) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:59:38,881 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 814 838) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0))) [2022-07-13 17:59:38,881 INFO L899 garLoopResultBuilder]: For program point L543(lines 543 549) no Hoare annotation was computed. [2022-07-13 17:59:38,881 INFO L895 garLoopResultBuilder]: At program point L828(line 828) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= ~waterLevel~0 1))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)) .cse1) (or (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)) .cse0 .cse2 .cse1) (or (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse1))) [2022-07-13 17:59:38,881 INFO L895 garLoopResultBuilder]: At program point L952(lines 937 955) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (.cse4 (not (<= ~waterLevel~0 1))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) .cse3) .cse4 .cse5) (or .cse0 (not (<= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)) .cse5 (and .cse1 .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) (not .cse3) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (or (not (= |old(~pumpRunning~0)| 1)) .cse4 .cse5))) [2022-07-13 17:59:38,881 INFO L899 garLoopResultBuilder]: For program point L822(lines 822 830) no Hoare annotation was computed. [2022-07-13 17:59:38,882 INFO L899 garLoopResultBuilder]: For program point L818(lines 818 835) no Hoare annotation was computed. [2022-07-13 17:59:38,882 INFO L899 garLoopResultBuilder]: For program point L946(lines 946 950) no Hoare annotation was computed. [2022-07-13 17:59:38,882 INFO L899 garLoopResultBuilder]: For program point L946-2(lines 946 950) no Hoare annotation was computed. [2022-07-13 17:59:38,882 INFO L895 garLoopResultBuilder]: At program point L870(lines 865 872) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= ~waterLevel~0 1))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= ~waterLevel~0 2)) .cse1 (and (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 1))) (or .cse0 .cse2 .cse1) (or (not (= |old(~pumpRunning~0)| 1)) .cse2 .cse1))) [2022-07-13 17:59:38,882 INFO L895 garLoopResultBuilder]: At program point L548(lines 539 552) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse3 (not (<= ~waterLevel~0 1))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 (not .cse2)) .cse3 .cse4) (or .cse0 (not (<= 2 ~waterLevel~0)) (and .cse1 .cse2) (not (<= ~waterLevel~0 2)) .cse4) (or (not (= |old(~pumpRunning~0)| 1)) .cse3 .cse4))) [2022-07-13 17:59:38,882 INFO L895 garLoopResultBuilder]: At program point L833(line 833) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) .cse0 (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0))) [2022-07-13 17:59:38,883 INFO L899 garLoopResultBuilder]: For program point L833-1(lines 814 838) no Hoare annotation was computed. [2022-07-13 17:59:38,883 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 814 838) no Hoare annotation was computed. [2022-07-13 17:59:38,883 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 474 485) no Hoare annotation was computed. [2022-07-13 17:59:38,883 INFO L899 garLoopResultBuilder]: For program point L478-1(lines 474 485) no Hoare annotation was computed. [2022-07-13 17:59:38,883 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 474 485) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) (not (= ~pumpRunning~0 0)) .cse0 .cse1) (or (not (= ~pumpRunning~0 1)) .cse0 .cse1 (not (<= |old(~waterLevel~0)| 2))))) [2022-07-13 17:59:38,886 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:38,888 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-13 17:59:38,911 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.07 05:59:38 BoogieIcfgContainer [2022-07-13 17:59:38,911 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-13 17:59:38,912 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-13 17:59:38,912 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-13 17:59:38,912 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-13 17:59:38,912 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:59:29" (3/4) ... [2022-07-13 17:59:38,915 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-13 17:59:38,920 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-13 17:59:38,920 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-13 17:59:38,920 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-13 17:59:38,920 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-13 17:59:38,921 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-13 17:59:38,921 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:59:38,921 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-13 17:59:38,927 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-07-13 17:59:38,928 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-13 17:59:38,928 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-13 17:59:38,929 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-13 17:59:38,929 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-13 17:59:38,929 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:59:38,930 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:59:38,952 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 17:59:38,953 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 17:59:38,953 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || (((((\result == 1 && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) && pumpRunning == 1) [2022-07-13 17:59:38,954 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 17:59:38,954 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) [2022-07-13 17:59:38,955 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || (((((\result == 1 && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) && pumpRunning == 1) [2022-07-13 17:59:38,955 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((tmp___0 <= 1 && \result <= 1) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || (((methaneLevelCritical == tmp && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || (((methaneLevelCritical == tmp && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((methaneLevelCritical == tmp && pumpRunning == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((methaneLevelCritical == tmp && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && (((((!(\old(pumpRunning) == 0) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == tmp && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 17:59:38,955 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 17:59:38,955 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || \result == 1) && ((((!(\old(pumpRunning) == 1) || ((((methaneLevelCritical == tmp && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((methaneLevelCritical == tmp && pumpRunning == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || (((methaneLevelCritical == tmp && pumpRunning == 0) && \old(waterLevel) == waterLevel) && \result <= 1))) && ((((!(\old(pumpRunning) == 0) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 17:59:38,956 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(\result == 0))) || !(waterLevel <= 1)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive) [2022-07-13 17:59:38,956 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 17:59:38,956 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((methaneLevelCritical == tmp && \result == 1) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) && ((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 17:59:38,956 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 0) && !(\result == 0)) && 1 <= tmp___0) && \result == 0))) && ((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive) [2022-07-13 17:59:38,956 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 1) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 17:59:38,956 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) || (((((!(tmp == 0) && tmp == 0) && !(\result == 0)) && 1 <= tmp___0) && \result == 0) && pumpRunning == 1)) && ((!(\old(pumpRunning) == 0) || !(waterLevel <= 1)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive) [2022-07-13 17:59:38,956 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 17:59:38,984 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-13 17:59:38,984 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-13 17:59:38,985 INFO L158 Benchmark]: Toolchain (without parser) took 10126.62ms. Allocated memory was 94.4MB in the beginning and 163.6MB in the end (delta: 69.2MB). Free memory was 72.3MB in the beginning and 92.1MB in the end (delta: -19.8MB). Peak memory consumption was 50.0MB. Max. memory is 16.1GB. [2022-07-13 17:59:38,985 INFO L158 Benchmark]: CDTParser took 0.10ms. Allocated memory is still 94.4MB. Free memory is still 71.5MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 17:59:38,985 INFO L158 Benchmark]: CACSL2BoogieTranslator took 376.17ms. Allocated memory is still 94.4MB. Free memory was 72.3MB in the beginning and 53.4MB in the end (delta: 18.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-13 17:59:38,986 INFO L158 Benchmark]: Boogie Procedure Inliner took 68.08ms. Allocated memory is still 94.4MB. Free memory was 53.4MB in the beginning and 50.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:59:38,986 INFO L158 Benchmark]: Boogie Preprocessor took 25.79ms. Allocated memory is still 94.4MB. Free memory was 50.9MB in the beginning and 49.1MB in the end (delta: 1.8MB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 17:59:38,986 INFO L158 Benchmark]: RCFGBuilder took 530.08ms. Allocated memory was 94.4MB in the beginning and 113.2MB in the end (delta: 18.9MB). Free memory was 49.1MB in the beginning and 77.6MB in the end (delta: -28.5MB). Peak memory consumption was 11.0MB. Max. memory is 16.1GB. [2022-07-13 17:59:38,987 INFO L158 Benchmark]: TraceAbstraction took 9046.07ms. Allocated memory was 113.2MB in the beginning and 163.6MB in the end (delta: 50.3MB). Free memory was 76.9MB in the beginning and 98.4MB in the end (delta: -21.5MB). Peak memory consumption was 81.3MB. Max. memory is 16.1GB. [2022-07-13 17:59:38,987 INFO L158 Benchmark]: Witness Printer took 72.88ms. Allocated memory is still 163.6MB. Free memory was 98.4MB in the beginning and 92.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-13 17:59:38,988 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10ms. Allocated memory is still 94.4MB. Free memory is still 71.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 376.17ms. Allocated memory is still 94.4MB. Free memory was 72.3MB in the beginning and 53.4MB in the end (delta: 18.9MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 68.08ms. Allocated memory is still 94.4MB. Free memory was 53.4MB in the beginning and 50.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 25.79ms. Allocated memory is still 94.4MB. Free memory was 50.9MB in the beginning and 49.1MB in the end (delta: 1.8MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 530.08ms. Allocated memory was 94.4MB in the beginning and 113.2MB in the end (delta: 18.9MB). Free memory was 49.1MB in the beginning and 77.6MB in the end (delta: -28.5MB). Peak memory consumption was 11.0MB. Max. memory is 16.1GB. * TraceAbstraction took 9046.07ms. Allocated memory was 113.2MB in the beginning and 163.6MB in the end (delta: 50.3MB). Free memory was 76.9MB in the beginning and 98.4MB in the end (delta: -21.5MB). Peak memory consumption was 81.3MB. Max. memory is 16.1GB. * Witness Printer took 72.88ms. Allocated memory is still 163.6MB. Free memory was 98.4MB in the beginning and 92.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 704]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 89 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.0s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2255 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2227 mSDsluCounter, 4400 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3098 mSDsCounter, 683 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2380 IncrementalHoareTripleChecker+Invalid, 3063 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 683 mSolverCounterUnsat, 1302 mSDtfsCounter, 2380 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 398 GetRequests, 250 SyntacticMatches, 3 SemanticMatches, 145 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1246 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=301occurred in iteration=9, InterpolantAutomatonStates: 134, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 65 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 41 LocationsWithAnnotation, 1117 PreInvPairs, 1368 NumberOfFragments, 1438 HoareAnnotationTreeSize, 1117 FomulaSimplifications, 212 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 41 FomulaSimplificationsInter, 12245 FormulaSimplificationTreeSizeReductionInter, 3.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 618 NumberOfCodeBlocks, 618 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 685 ConstructedInterpolants, 0 QuantifiedInterpolants, 1317 SizeOfPredicates, 4 NumberOfNonLiveVariables, 438 ConjunctsInSsa, 13 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 45/63 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 420]: Loop Invariant Derived loop invariant: (((((((tmp___0 <= 1 && \result <= 1) || !(methaneLevelCritical == 0)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || (((methaneLevelCritical == tmp && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || (((methaneLevelCritical == tmp && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((methaneLevelCritical == tmp && pumpRunning == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((methaneLevelCritical == tmp && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && (((((!(\old(pumpRunning) == 0) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == tmp && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 1) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 683]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 720]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || (((((\result == 1 && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) && pumpRunning == 1) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp == 0) && !(\result == 0)) && 1 <= tmp___0) && \result == 0))) && ((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive) - InvariantResult [Line: 676]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 628]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 539]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && !(\result == 0))) || !(waterLevel <= 1)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive) - InvariantResult [Line: 840]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel))) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) - InvariantResult [Line: 975]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || (((((\result == 1 && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) && pumpRunning == 1) - InvariantResult [Line: 620]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 892]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((methaneLevelCritical == tmp && \result == 1) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) && ((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 641]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 462]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 553]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 690]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 865]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) || (((((!(tmp == 0) && tmp == 0) && !(\result == 0)) && 1 <= tmp___0) && \result == 0) && pumpRunning == 1)) && ((!(\old(pumpRunning) == 0) || !(waterLevel <= 1)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 1) || !(waterLevel <= 1)) || 0 == systemActive) - InvariantResult [Line: 956]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 710]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || 0 == systemActive) || \result == 1) && ((((!(\old(pumpRunning) == 1) || ((((methaneLevelCritical == tmp && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((methaneLevelCritical == tmp && pumpRunning == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || (((methaneLevelCritical == tmp && pumpRunning == 0) && \old(waterLevel) == waterLevel) && \result <= 1))) && ((((!(\old(pumpRunning) == 0) || ((methaneLevelCritical == tmp && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((methaneLevelCritical == 0 || !(\old(pumpRunning) == 1)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 1) || 0 == systemActive) || !(\old(waterLevel) <= 2)) RESULT: Ultimate proved your program to be correct! [2022-07-13 17:59:39,034 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE