./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4d13ffd2557e7d7902d8a5eac414f9fb7393252d85c14855e86000741be6847f --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-13 17:59:35,336 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-13 17:59:35,339 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-13 17:59:35,374 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-13 17:59:35,376 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-13 17:59:35,378 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-13 17:59:35,382 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-13 17:59:35,388 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-13 17:59:35,390 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-13 17:59:35,394 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-13 17:59:35,395 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-13 17:59:35,397 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-13 17:59:35,398 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-13 17:59:35,400 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-13 17:59:35,401 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-13 17:59:35,404 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-13 17:59:35,405 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-13 17:59:35,406 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-13 17:59:35,409 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-13 17:59:35,413 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-13 17:59:35,415 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-13 17:59:35,416 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-13 17:59:35,417 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-13 17:59:35,418 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-13 17:59:35,419 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-13 17:59:35,427 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-13 17:59:35,427 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-13 17:59:35,428 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-13 17:59:35,429 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-13 17:59:35,429 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-13 17:59:35,431 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-13 17:59:35,432 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-13 17:59:35,433 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-13 17:59:35,434 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-13 17:59:35,434 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-13 17:59:35,436 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-13 17:59:35,436 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-13 17:59:35,436 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-13 17:59:35,437 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-13 17:59:35,437 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-13 17:59:35,437 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-13 17:59:35,439 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-13 17:59:35,440 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-13 17:59:35,471 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-13 17:59:35,471 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-13 17:59:35,472 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-13 17:59:35,472 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-13 17:59:35,472 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-13 17:59:35,473 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-13 17:59:35,473 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-13 17:59:35,473 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-13 17:59:35,474 INFO L138 SettingsManager]: * Use SBE=true [2022-07-13 17:59:35,474 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-13 17:59:35,475 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-13 17:59:35,475 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-13 17:59:35,475 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-13 17:59:35,475 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-13 17:59:35,475 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-13 17:59:35,476 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-13 17:59:35,476 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-13 17:59:35,476 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-13 17:59:35,476 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-13 17:59:35,477 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-13 17:59:35,477 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-13 17:59:35,478 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-13 17:59:35,478 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-13 17:59:35,478 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-13 17:59:35,478 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:59:35,478 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-13 17:59:35,478 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-13 17:59:35,479 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-13 17:59:35,479 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-13 17:59:35,479 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-13 17:59:35,479 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-13 17:59:35,479 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-13 17:59:35,480 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-13 17:59:35,480 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4d13ffd2557e7d7902d8a5eac414f9fb7393252d85c14855e86000741be6847f [2022-07-13 17:59:35,721 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-13 17:59:35,751 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-13 17:59:35,754 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-13 17:59:35,755 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-13 17:59:35,756 INFO L275 PluginConnector]: CDTParser initialized [2022-07-13 17:59:35,757 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c [2022-07-13 17:59:35,816 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bc5bafcaa/188fba33ca4a4dffa06db75a6186a66c/FLAG357bea6c6 [2022-07-13 17:59:36,337 INFO L306 CDTParser]: Found 1 translation units. [2022-07-13 17:59:36,340 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c [2022-07-13 17:59:36,357 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bc5bafcaa/188fba33ca4a4dffa06db75a6186a66c/FLAG357bea6c6 [2022-07-13 17:59:36,668 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bc5bafcaa/188fba33ca4a4dffa06db75a6186a66c [2022-07-13 17:59:36,670 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-13 17:59:36,672 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-13 17:59:36,675 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-13 17:59:36,675 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-13 17:59:36,678 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-13 17:59:36,679 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:59:36" (1/1) ... [2022-07-13 17:59:36,680 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2d4cae6f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:36, skipping insertion in model container [2022-07-13 17:59:36,680 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 05:59:36" (1/1) ... [2022-07-13 17:59:36,686 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-13 17:59:36,749 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-13 17:59:36,875 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c[1605,1618] [2022-07-13 17:59:37,001 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:59:37,009 INFO L203 MainTranslator]: Completed pre-run [2022-07-13 17:59:37,032 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product62.cil.c[1605,1618] [2022-07-13 17:59:37,095 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 17:59:37,117 INFO L208 MainTranslator]: Completed translation [2022-07-13 17:59:37,117 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:37 WrapperNode [2022-07-13 17:59:37,118 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-13 17:59:37,119 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-13 17:59:37,119 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-13 17:59:37,119 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-13 17:59:37,129 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:37" (1/1) ... [2022-07-13 17:59:37,146 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:37" (1/1) ... [2022-07-13 17:59:37,174 INFO L137 Inliner]: procedures = 58, calls = 162, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 283 [2022-07-13 17:59:37,178 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-13 17:59:37,179 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-13 17:59:37,179 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-13 17:59:37,179 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-13 17:59:37,186 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:37" (1/1) ... [2022-07-13 17:59:37,187 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:37" (1/1) ... [2022-07-13 17:59:37,201 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:37" (1/1) ... [2022-07-13 17:59:37,201 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:37" (1/1) ... [2022-07-13 17:59:37,206 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:37" (1/1) ... [2022-07-13 17:59:37,212 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:37" (1/1) ... [2022-07-13 17:59:37,214 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:37" (1/1) ... [2022-07-13 17:59:37,216 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-13 17:59:37,217 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-13 17:59:37,218 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-13 17:59:37,218 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-13 17:59:37,219 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:37" (1/1) ... [2022-07-13 17:59:37,225 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 17:59:37,237 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:59:37,256 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-13 17:59:37,258 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-13 17:59:37,288 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-13 17:59:37,289 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-13 17:59:37,289 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-13 17:59:37,289 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-13 17:59:37,289 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-13 17:59:37,289 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-13 17:59:37,290 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-13 17:59:37,291 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-07-13 17:59:37,291 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-07-13 17:59:37,291 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:59:37,292 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:59:37,292 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-13 17:59:37,292 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-13 17:59:37,292 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-13 17:59:37,292 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-13 17:59:37,292 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-13 17:59:37,293 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-13 17:59:37,293 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-13 17:59:37,293 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-13 17:59:37,293 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-13 17:59:37,293 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-13 17:59:37,293 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-13 17:59:37,293 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-13 17:59:37,294 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-13 17:59:37,390 INFO L234 CfgBuilder]: Building ICFG [2022-07-13 17:59:37,391 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-13 17:59:37,774 INFO L275 CfgBuilder]: Performing block encoding [2022-07-13 17:59:37,781 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-13 17:59:37,784 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-13 17:59:37,787 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:59:37 BoogieIcfgContainer [2022-07-13 17:59:37,788 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-13 17:59:37,790 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-13 17:59:37,790 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-13 17:59:37,793 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-13 17:59:37,793 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.07 05:59:36" (1/3) ... [2022-07-13 17:59:37,794 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4afffd99 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:59:37, skipping insertion in model container [2022-07-13 17:59:37,794 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 05:59:37" (2/3) ... [2022-07-13 17:59:37,795 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4afffd99 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 05:59:37, skipping insertion in model container [2022-07-13 17:59:37,795 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:59:37" (3/3) ... [2022-07-13 17:59:37,796 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product62.cil.c [2022-07-13 17:59:37,834 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-13 17:59:37,834 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-13 17:59:37,907 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-13 17:59:37,914 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@39c9114b, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@a5d6edf [2022-07-13 17:59:37,914 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-13 17:59:37,923 INFO L276 IsEmpty]: Start isEmpty. Operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-07-13 17:59:37,936 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-07-13 17:59:37,937 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:37,937 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:37,938 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:37,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:37,944 INFO L85 PathProgramCache]: Analyzing trace with hash 1444919738, now seen corresponding path program 1 times [2022-07-13 17:59:37,951 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:37,951 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [80153904] [2022-07-13 17:59:37,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:37,952 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:38,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:38,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-13 17:59:38,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:38,187 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:38,187 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:38,188 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [80153904] [2022-07-13 17:59:38,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [80153904] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:38,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:38,191 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-13 17:59:38,193 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2052046380] [2022-07-13 17:59:38,194 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:38,198 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-13 17:59:38,198 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:38,223 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-13 17:59:38,224 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:59:38,227 INFO L87 Difference]: Start difference. First operand has 111 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 91 states have internal predecessors, (111), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:38,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:38,267 INFO L93 Difference]: Finished difference Result 214 states and 289 transitions. [2022-07-13 17:59:38,268 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-13 17:59:38,270 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-07-13 17:59:38,270 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:38,278 INFO L225 Difference]: With dead ends: 214 [2022-07-13 17:59:38,279 INFO L226 Difference]: Without dead ends: 102 [2022-07-13 17:59:38,283 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 17:59:38,288 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:38,289 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:38,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 102 states. [2022-07-13 17:59:38,343 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 102 to 102. [2022-07-13 17:59:38,344 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 83 states have internal predecessors, (97), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-07-13 17:59:38,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 132 transitions. [2022-07-13 17:59:38,349 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 132 transitions. Word has length 25 [2022-07-13 17:59:38,349 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:38,349 INFO L495 AbstractCegarLoop]: Abstraction has 102 states and 132 transitions. [2022-07-13 17:59:38,349 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:38,350 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 132 transitions. [2022-07-13 17:59:38,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-07-13 17:59:38,352 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:38,352 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:38,353 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-13 17:59:38,353 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:38,353 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:38,354 INFO L85 PathProgramCache]: Analyzing trace with hash 1097025375, now seen corresponding path program 1 times [2022-07-13 17:59:38,354 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:38,354 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1722552751] [2022-07-13 17:59:38,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:38,354 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:38,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:38,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-07-13 17:59:38,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:38,433 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:38,435 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:38,435 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1722552751] [2022-07-13 17:59:38,436 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1722552751] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:38,436 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:38,436 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 17:59:38,437 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [961836328] [2022-07-13 17:59:38,437 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:38,438 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 17:59:38,439 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:38,439 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 17:59:38,440 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:59:38,441 INFO L87 Difference]: Start difference. First operand 102 states and 132 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:38,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:38,464 INFO L93 Difference]: Finished difference Result 169 states and 219 transitions. [2022-07-13 17:59:38,465 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 17:59:38,465 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-07-13 17:59:38,465 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:38,467 INFO L225 Difference]: With dead ends: 169 [2022-07-13 17:59:38,467 INFO L226 Difference]: Without dead ends: 93 [2022-07-13 17:59:38,468 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 17:59:38,469 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 13 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:38,470 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 221 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:38,471 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-07-13 17:59:38,478 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2022-07-13 17:59:38,479 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 77 states have internal predecessors, (90), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-13 17:59:38,480 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 120 transitions. [2022-07-13 17:59:38,481 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 120 transitions. Word has length 26 [2022-07-13 17:59:38,481 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:38,481 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 120 transitions. [2022-07-13 17:59:38,481 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:38,481 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 120 transitions. [2022-07-13 17:59:38,483 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-07-13 17:59:38,483 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:38,483 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:38,483 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-13 17:59:38,484 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:38,484 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:38,484 INFO L85 PathProgramCache]: Analyzing trace with hash 2131311946, now seen corresponding path program 1 times [2022-07-13 17:59:38,484 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:38,485 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [853664683] [2022-07-13 17:59:38,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:38,485 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:38,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:38,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:59:38,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:38,596 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:38,597 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:38,597 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [853664683] [2022-07-13 17:59:38,597 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [853664683] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:38,599 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:38,599 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:59:38,599 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1906959357] [2022-07-13 17:59:38,599 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:38,600 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:59:38,601 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:38,601 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:59:38,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:59:38,602 INFO L87 Difference]: Start difference. First operand 93 states and 120 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:38,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:38,684 INFO L93 Difference]: Finished difference Result 179 states and 234 transitions. [2022-07-13 17:59:38,685 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 17:59:38,685 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-07-13 17:59:38,686 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:38,690 INFO L225 Difference]: With dead ends: 179 [2022-07-13 17:59:38,690 INFO L226 Difference]: Without dead ends: 93 [2022-07-13 17:59:38,693 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:59:38,694 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 145 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:38,695 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [145 Valid, 307 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 17:59:38,699 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-07-13 17:59:38,707 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2022-07-13 17:59:38,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 77 states have internal predecessors, (89), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-07-13 17:59:38,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 119 transitions. [2022-07-13 17:59:38,723 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 119 transitions. Word has length 31 [2022-07-13 17:59:38,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:38,723 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 119 transitions. [2022-07-13 17:59:38,723 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 17:59:38,723 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 119 transitions. [2022-07-13 17:59:38,725 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-07-13 17:59:38,725 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:38,725 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:38,725 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-13 17:59:38,725 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:38,726 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:38,726 INFO L85 PathProgramCache]: Analyzing trace with hash 394218810, now seen corresponding path program 1 times [2022-07-13 17:59:38,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:38,726 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [448102001] [2022-07-13 17:59:38,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:38,727 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:38,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:38,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:59:38,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:38,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:59:38,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:38,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:59:38,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:38,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-07-13 17:59:38,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:38,855 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:38,856 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:38,856 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [448102001] [2022-07-13 17:59:38,856 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [448102001] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:38,857 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:38,857 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 17:59:38,857 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1706786397] [2022-07-13 17:59:38,857 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:38,858 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 17:59:38,859 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:38,859 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 17:59:38,860 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 17:59:38,860 INFO L87 Difference]: Start difference. First operand 93 states and 119 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-13 17:59:39,104 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:39,104 INFO L93 Difference]: Finished difference Result 271 states and 345 transitions. [2022-07-13 17:59:39,105 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 17:59:39,105 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 46 [2022-07-13 17:59:39,106 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:39,109 INFO L225 Difference]: With dead ends: 271 [2022-07-13 17:59:39,110 INFO L226 Difference]: Without dead ends: 185 [2022-07-13 17:59:39,111 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-07-13 17:59:39,119 INFO L413 NwaCegarLoop]: 155 mSDtfsCounter, 216 mSDsluCounter, 191 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 346 SdHoareTripleChecker+Invalid, 205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:39,120 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [218 Valid, 346 Invalid, 205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:59:39,122 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2022-07-13 17:59:39,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 179. [2022-07-13 17:59:39,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 133 states have (on average 1.2481203007518797) internal successors, (166), 142 states have internal predecessors, (166), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-07-13 17:59:39,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 217 transitions. [2022-07-13 17:59:39,147 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 217 transitions. Word has length 46 [2022-07-13 17:59:39,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:39,147 INFO L495 AbstractCegarLoop]: Abstraction has 179 states and 217 transitions. [2022-07-13 17:59:39,148 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-07-13 17:59:39,148 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 217 transitions. [2022-07-13 17:59:39,152 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-07-13 17:59:39,152 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:39,153 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:39,153 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-13 17:59:39,153 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:39,153 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:39,153 INFO L85 PathProgramCache]: Analyzing trace with hash 1565999890, now seen corresponding path program 1 times [2022-07-13 17:59:39,154 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:39,155 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [947774908] [2022-07-13 17:59:39,156 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:39,156 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:39,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:39,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:59:39,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:39,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:59:39,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:39,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:59:39,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:39,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-07-13 17:59:39,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:39,287 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:39,287 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:39,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [947774908] [2022-07-13 17:59:39,288 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [947774908] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:39,288 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:39,288 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:59:39,288 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [282510212] [2022-07-13 17:59:39,288 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:39,289 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:59:39,289 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:39,289 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:59:39,289 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:59:39,290 INFO L87 Difference]: Start difference. First operand 179 states and 217 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:59:39,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:39,513 INFO L93 Difference]: Finished difference Result 458 states and 576 transitions. [2022-07-13 17:59:39,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 17:59:39,514 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2022-07-13 17:59:39,514 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:39,516 INFO L225 Difference]: With dead ends: 458 [2022-07-13 17:59:39,516 INFO L226 Difference]: Without dead ends: 286 [2022-07-13 17:59:39,517 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-07-13 17:59:39,517 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 158 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 431 SdHoareTripleChecker+Invalid, 251 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:39,517 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [165 Valid, 431 Invalid, 251 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:59:39,518 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2022-07-13 17:59:39,548 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 278. [2022-07-13 17:59:39,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 207 states have (on average 1.2367149758454106) internal successors, (256), 219 states have internal predecessors, (256), 35 states have call successors, (35), 30 states have call predecessors, (35), 35 states have return successors, (48), 37 states have call predecessors, (48), 35 states have call successors, (48) [2022-07-13 17:59:39,550 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 339 transitions. [2022-07-13 17:59:39,551 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 339 transitions. Word has length 52 [2022-07-13 17:59:39,551 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:39,551 INFO L495 AbstractCegarLoop]: Abstraction has 278 states and 339 transitions. [2022-07-13 17:59:39,551 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 17:59:39,552 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 339 transitions. [2022-07-13 17:59:39,552 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-13 17:59:39,552 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:39,553 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:39,553 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-13 17:59:39,553 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:39,553 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:39,553 INFO L85 PathProgramCache]: Analyzing trace with hash 862642872, now seen corresponding path program 1 times [2022-07-13 17:59:39,553 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:39,553 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1466919833] [2022-07-13 17:59:39,554 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:39,554 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:39,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:39,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:39,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:39,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:59:39,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:39,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:59:39,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:39,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:59:39,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:39,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-13 17:59:39,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:39,631 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:39,631 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:39,631 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1466919833] [2022-07-13 17:59:39,631 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1466919833] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:39,631 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:39,631 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 17:59:39,631 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1496502144] [2022-07-13 17:59:39,632 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:39,632 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 17:59:39,632 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:39,632 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 17:59:39,632 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 17:59:39,633 INFO L87 Difference]: Start difference. First operand 278 states and 339 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-13 17:59:40,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:40,175 INFO L93 Difference]: Finished difference Result 670 states and 856 transitions. [2022-07-13 17:59:40,176 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-07-13 17:59:40,176 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2022-07-13 17:59:40,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:40,181 INFO L225 Difference]: With dead ends: 670 [2022-07-13 17:59:40,182 INFO L226 Difference]: Without dead ends: 498 [2022-07-13 17:59:40,183 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-07-13 17:59:40,184 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 364 mSDsluCounter, 260 mSDsCounter, 0 mSdLazyCounter, 425 mSolverCounterSat, 152 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 368 SdHoareTripleChecker+Valid, 376 SdHoareTripleChecker+Invalid, 577 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 152 IncrementalHoareTripleChecker+Valid, 425 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:40,184 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [368 Valid, 376 Invalid, 577 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [152 Valid, 425 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-13 17:59:40,186 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2022-07-13 17:59:40,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 464. [2022-07-13 17:59:40,245 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 464 states, 343 states have (on average 1.215743440233236) internal successors, (417), 365 states have internal predecessors, (417), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2022-07-13 17:59:40,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 464 states to 464 states and 572 transitions. [2022-07-13 17:59:40,248 INFO L78 Accepts]: Start accepts. Automaton has 464 states and 572 transitions. Word has length 56 [2022-07-13 17:59:40,248 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:40,248 INFO L495 AbstractCegarLoop]: Abstraction has 464 states and 572 transitions. [2022-07-13 17:59:40,248 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-13 17:59:40,249 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 572 transitions. [2022-07-13 17:59:40,250 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-13 17:59:40,250 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:40,250 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:40,250 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-13 17:59:40,250 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:40,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:40,251 INFO L85 PathProgramCache]: Analyzing trace with hash 924682486, now seen corresponding path program 1 times [2022-07-13 17:59:40,251 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:40,251 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1805326068] [2022-07-13 17:59:40,251 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:40,251 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:40,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:40,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:40,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:40,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:59:40,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:40,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:59:40,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:40,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:59:40,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:40,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-13 17:59:40,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:40,305 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:40,305 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:40,306 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1805326068] [2022-07-13 17:59:40,306 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1805326068] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:40,306 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:40,306 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 17:59:40,306 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [336102552] [2022-07-13 17:59:40,306 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:40,306 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 17:59:40,307 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:40,307 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 17:59:40,307 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 17:59:40,307 INFO L87 Difference]: Start difference. First operand 464 states and 572 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-13 17:59:40,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:40,608 INFO L93 Difference]: Finished difference Result 860 states and 1070 transitions. [2022-07-13 17:59:40,608 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-13 17:59:40,608 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2022-07-13 17:59:40,609 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:40,612 INFO L225 Difference]: With dead ends: 860 [2022-07-13 17:59:40,613 INFO L226 Difference]: Without dead ends: 498 [2022-07-13 17:59:40,615 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2022-07-13 17:59:40,616 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 184 mSDsluCounter, 215 mSDsCounter, 0 mSdLazyCounter, 272 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 348 SdHoareTripleChecker+Invalid, 346 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 272 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:40,617 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [187 Valid, 348 Invalid, 346 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 272 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 17:59:40,618 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 498 states. [2022-07-13 17:59:40,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 498 to 464. [2022-07-13 17:59:40,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 464 states, 343 states have (on average 1.2128279883381925) internal successors, (416), 365 states have internal predecessors, (416), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2022-07-13 17:59:40,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 464 states to 464 states and 571 transitions. [2022-07-13 17:59:40,652 INFO L78 Accepts]: Start accepts. Automaton has 464 states and 571 transitions. Word has length 56 [2022-07-13 17:59:40,654 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:40,654 INFO L495 AbstractCegarLoop]: Abstraction has 464 states and 571 transitions. [2022-07-13 17:59:40,654 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-13 17:59:40,654 INFO L276 IsEmpty]: Start isEmpty. Operand 464 states and 571 transitions. [2022-07-13 17:59:40,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-07-13 17:59:40,656 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:40,656 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:40,656 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-13 17:59:40,656 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:40,657 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:40,657 INFO L85 PathProgramCache]: Analyzing trace with hash 790668980, now seen corresponding path program 1 times [2022-07-13 17:59:40,657 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:40,657 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [947588840] [2022-07-13 17:59:40,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:40,657 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:40,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:40,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:40,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:40,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:59:40,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:40,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:59:40,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:40,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:59:40,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:40,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-07-13 17:59:40,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:40,740 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:40,740 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:40,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [947588840] [2022-07-13 17:59:40,740 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [947588840] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:40,740 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:40,741 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-07-13 17:59:40,741 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1448051240] [2022-07-13 17:59:40,741 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:40,741 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-07-13 17:59:40,741 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:40,742 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-07-13 17:59:40,742 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2022-07-13 17:59:40,742 INFO L87 Difference]: Start difference. First operand 464 states and 571 transitions. Second operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-13 17:59:41,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:41,122 INFO L93 Difference]: Finished difference Result 950 states and 1185 transitions. [2022-07-13 17:59:41,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-13 17:59:41,123 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2022-07-13 17:59:41,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:41,126 INFO L225 Difference]: With dead ends: 950 [2022-07-13 17:59:41,126 INFO L226 Difference]: Without dead ends: 493 [2022-07-13 17:59:41,127 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=156, Unknown=0, NotChecked=0, Total=210 [2022-07-13 17:59:41,128 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 221 mSDsluCounter, 363 mSDsCounter, 0 mSdLazyCounter, 523 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 477 SdHoareTripleChecker+Invalid, 595 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 523 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:41,128 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [224 Valid, 477 Invalid, 595 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 523 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-13 17:59:41,129 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 493 states. [2022-07-13 17:59:41,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 493 to 467. [2022-07-13 17:59:41,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 467 states, 348 states have (on average 1.206896551724138) internal successors, (420), 369 states have internal predecessors, (420), 59 states have call successors, (59), 45 states have call predecessors, (59), 59 states have return successors, (94), 63 states have call predecessors, (94), 59 states have call successors, (94) [2022-07-13 17:59:41,156 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 467 states to 467 states and 573 transitions. [2022-07-13 17:59:41,156 INFO L78 Accepts]: Start accepts. Automaton has 467 states and 573 transitions. Word has length 56 [2022-07-13 17:59:41,156 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:41,156 INFO L495 AbstractCegarLoop]: Abstraction has 467 states and 573 transitions. [2022-07-13 17:59:41,157 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-07-13 17:59:41,157 INFO L276 IsEmpty]: Start isEmpty. Operand 467 states and 573 transitions. [2022-07-13 17:59:41,158 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-07-13 17:59:41,158 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:41,158 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:41,158 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-13 17:59:41,159 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:41,159 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:41,159 INFO L85 PathProgramCache]: Analyzing trace with hash -1116274415, now seen corresponding path program 1 times [2022-07-13 17:59:41,159 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:41,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1732519454] [2022-07-13 17:59:41,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:41,160 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:41,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:41,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:41,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:41,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:59:41,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:41,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:59:41,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:41,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:59:41,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:41,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:59:41,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:41,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-07-13 17:59:41,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:41,321 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-13 17:59:41,322 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:41,322 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1732519454] [2022-07-13 17:59:41,322 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1732519454] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:59:41,322 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [709096732] [2022-07-13 17:59:41,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:41,322 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:59:41,323 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:59:41,328 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:59:41,338 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-13 17:59:41,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:41,457 INFO L263 TraceCheckSpWp]: Trace formula consists of 393 conjuncts, 17 conjunts are in the unsatisfiable core [2022-07-13 17:59:41,462 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:59:41,780 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 17:59:41,781 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 17:59:41,781 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [709096732] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:41,781 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 17:59:41,781 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2022-07-13 17:59:41,781 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2122606789] [2022-07-13 17:59:41,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:41,782 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-13 17:59:41,782 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:41,782 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-13 17:59:41,782 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-07-13 17:59:41,783 INFO L87 Difference]: Start difference. First operand 467 states and 573 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-13 17:59:41,934 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:41,935 INFO L93 Difference]: Finished difference Result 1368 states and 1709 transitions. [2022-07-13 17:59:41,935 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-13 17:59:41,935 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2022-07-13 17:59:41,936 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:41,939 INFO L225 Difference]: With dead ends: 1368 [2022-07-13 17:59:41,939 INFO L226 Difference]: Without dead ends: 908 [2022-07-13 17:59:41,941 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 68 SyntacticMatches, 2 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=199, Unknown=0, NotChecked=0, Total=240 [2022-07-13 17:59:41,941 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 72 mSDsluCounter, 601 mSDsCounter, 0 mSdLazyCounter, 198 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 733 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 198 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:41,942 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 733 Invalid, 202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 198 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 17:59:41,943 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 908 states. [2022-07-13 17:59:41,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 908 to 906. [2022-07-13 17:59:41,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 673 states have (on average 1.1961367013372957) internal successors, (805), 711 states have internal predecessors, (805), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (189), 123 states have call predecessors, (189), 117 states have call successors, (189) [2022-07-13 17:59:41,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1111 transitions. [2022-07-13 17:59:41,994 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1111 transitions. Word has length 65 [2022-07-13 17:59:41,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:41,994 INFO L495 AbstractCegarLoop]: Abstraction has 906 states and 1111 transitions. [2022-07-13 17:59:41,995 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-13 17:59:41,995 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1111 transitions. [2022-07-13 17:59:41,996 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2022-07-13 17:59:41,996 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:41,997 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:42,026 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-13 17:59:42,221 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:59:42,222 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:42,222 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:42,222 INFO L85 PathProgramCache]: Analyzing trace with hash -930662327, now seen corresponding path program 1 times [2022-07-13 17:59:42,222 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:42,222 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [462793026] [2022-07-13 17:59:42,222 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:42,223 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:42,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:42,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:42,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:42,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-07-13 17:59:42,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:42,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:59:42,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:42,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:59:42,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:42,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:59:42,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:42,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-13 17:59:42,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:42,356 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-07-13 17:59:42,356 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:42,357 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [462793026] [2022-07-13 17:59:42,357 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [462793026] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:42,357 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:42,357 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-07-13 17:59:42,357 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [768621014] [2022-07-13 17:59:42,357 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:42,357 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-07-13 17:59:42,357 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:42,358 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-07-13 17:59:42,358 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-07-13 17:59:42,358 INFO L87 Difference]: Start difference. First operand 906 states and 1111 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-13 17:59:42,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:42,868 INFO L93 Difference]: Finished difference Result 1828 states and 2237 transitions. [2022-07-13 17:59:42,868 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-07-13 17:59:42,869 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 66 [2022-07-13 17:59:42,869 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:42,873 INFO L225 Difference]: With dead ends: 1828 [2022-07-13 17:59:42,873 INFO L226 Difference]: Without dead ends: 929 [2022-07-13 17:59:42,877 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=90, Invalid=330, Unknown=0, NotChecked=0, Total=420 [2022-07-13 17:59:42,878 INFO L413 NwaCegarLoop]: 176 mSDtfsCounter, 349 mSDsluCounter, 502 mSDsCounter, 0 mSdLazyCounter, 650 mSolverCounterSat, 138 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 678 SdHoareTripleChecker+Invalid, 788 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 138 IncrementalHoareTripleChecker+Valid, 650 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:42,879 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [350 Valid, 678 Invalid, 788 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [138 Valid, 650 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-13 17:59:42,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 929 states. [2022-07-13 17:59:42,945 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 929 to 906. [2022-07-13 17:59:42,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 673 states have (on average 1.1812778603268945) internal successors, (795), 711 states have internal predecessors, (795), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (174), 123 states have call predecessors, (174), 117 states have call successors, (174) [2022-07-13 17:59:42,950 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1086 transitions. [2022-07-13 17:59:42,951 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1086 transitions. Word has length 66 [2022-07-13 17:59:42,951 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:42,952 INFO L495 AbstractCegarLoop]: Abstraction has 906 states and 1086 transitions. [2022-07-13 17:59:42,952 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-13 17:59:42,952 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1086 transitions. [2022-07-13 17:59:42,953 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-07-13 17:59:42,953 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:42,953 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:42,954 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-13 17:59:42,954 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:42,955 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:42,955 INFO L85 PathProgramCache]: Analyzing trace with hash 1947456301, now seen corresponding path program 1 times [2022-07-13 17:59:42,955 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:42,955 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1263423329] [2022-07-13 17:59:42,955 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:42,956 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:42,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:43,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:43,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:43,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-07-13 17:59:43,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:43,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-13 17:59:43,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:43,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:59:43,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:43,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:59:43,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:43,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:59:43,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:43,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-07-13 17:59:43,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:43,065 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-07-13 17:59:43,066 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:43,066 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1263423329] [2022-07-13 17:59:43,066 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1263423329] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 17:59:43,066 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 17:59:43,067 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-07-13 17:59:43,067 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [307972629] [2022-07-13 17:59:43,067 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 17:59:43,067 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-07-13 17:59:43,067 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:43,068 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-07-13 17:59:43,068 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=110, Unknown=0, NotChecked=0, Total=132 [2022-07-13 17:59:43,068 INFO L87 Difference]: Start difference. First operand 906 states and 1086 transitions. Second operand has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-13 17:59:44,284 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:44,285 INFO L93 Difference]: Finished difference Result 1806 states and 2184 transitions. [2022-07-13 17:59:44,285 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-07-13 17:59:44,286 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 69 [2022-07-13 17:59:44,286 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:44,290 INFO L225 Difference]: With dead ends: 1806 [2022-07-13 17:59:44,291 INFO L226 Difference]: Without dead ends: 907 [2022-07-13 17:59:44,294 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 55 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 287 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=262, Invalid=1070, Unknown=0, NotChecked=0, Total=1332 [2022-07-13 17:59:44,294 INFO L413 NwaCegarLoop]: 184 mSDtfsCounter, 409 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 1482 mSolverCounterSat, 265 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 410 SdHoareTripleChecker+Valid, 432 SdHoareTripleChecker+Invalid, 1747 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 265 IncrementalHoareTripleChecker+Valid, 1482 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:44,294 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [410 Valid, 432 Invalid, 1747 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [265 Valid, 1482 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-07-13 17:59:44,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 907 states. [2022-07-13 17:59:44,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 907 to 874. [2022-07-13 17:59:44,344 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 874 states, 641 states have (on average 1.1528861154446177) internal successors, (739), 679 states have internal predecessors, (739), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (168), 123 states have call predecessors, (168), 117 states have call successors, (168) [2022-07-13 17:59:44,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 874 states to 874 states and 1024 transitions. [2022-07-13 17:59:44,348 INFO L78 Accepts]: Start accepts. Automaton has 874 states and 1024 transitions. Word has length 69 [2022-07-13 17:59:44,349 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:44,349 INFO L495 AbstractCegarLoop]: Abstraction has 874 states and 1024 transitions. [2022-07-13 17:59:44,349 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.5) internal successors, (54), 8 states have internal predecessors, (54), 2 states have call successors, (8), 5 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-13 17:59:44,349 INFO L276 IsEmpty]: Start isEmpty. Operand 874 states and 1024 transitions. [2022-07-13 17:59:44,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2022-07-13 17:59:44,357 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 17:59:44,357 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:44,357 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-07-13 17:59:44,358 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 17:59:44,358 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 17:59:44,358 INFO L85 PathProgramCache]: Analyzing trace with hash 20560600, now seen corresponding path program 1 times [2022-07-13 17:59:44,358 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 17:59:44,358 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1333192446] [2022-07-13 17:59:44,358 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:44,358 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 17:59:44,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:44,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 17:59:44,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:44,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-13 17:59:44,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:44,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 17:59:44,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:44,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 17:59:44,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:44,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 17:59:44,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:44,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:59:44,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:44,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-13 17:59:44,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:44,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-07-13 17:59:44,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:44,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-07-13 17:59:44,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:44,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-07-13 17:59:44,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:44,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 96 [2022-07-13 17:59:44,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:44,672 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 2 proven. 21 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-07-13 17:59:44,672 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 17:59:44,672 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1333192446] [2022-07-13 17:59:44,672 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1333192446] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 17:59:44,672 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2003966080] [2022-07-13 17:59:44,673 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 17:59:44,673 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 17:59:44,673 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 17:59:44,676 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 17:59:44,703 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-13 17:59:44,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 17:59:44,785 INFO L263 TraceCheckSpWp]: Trace formula consists of 492 conjuncts, 13 conjunts are in the unsatisfiable core [2022-07-13 17:59:44,794 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 17:59:44,945 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-13 17:59:44,945 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-13 17:59:45,229 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-07-13 17:59:45,230 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2003966080] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-13 17:59:45,230 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-13 17:59:45,230 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 8, 9] total 23 [2022-07-13 17:59:45,230 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1260594806] [2022-07-13 17:59:45,230 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-13 17:59:45,231 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-07-13 17:59:45,231 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 17:59:45,232 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-07-13 17:59:45,232 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=431, Unknown=0, NotChecked=0, Total=506 [2022-07-13 17:59:45,232 INFO L87 Difference]: Start difference. First operand 874 states and 1024 transitions. Second operand has 23 states, 23 states have (on average 5.3478260869565215) internal successors, (123), 16 states have internal predecessors, (123), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2022-07-13 17:59:47,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 17:59:47,554 INFO L93 Difference]: Finished difference Result 1808 states and 2190 transitions. [2022-07-13 17:59:47,554 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 74 states. [2022-07-13 17:59:47,555 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 5.3478260869565215) internal successors, (123), 16 states have internal predecessors, (123), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) Word has length 107 [2022-07-13 17:59:47,555 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 17:59:47,555 INFO L225 Difference]: With dead ends: 1808 [2022-07-13 17:59:47,555 INFO L226 Difference]: Without dead ends: 0 [2022-07-13 17:59:47,560 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 336 GetRequests, 242 SyntacticMatches, 4 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2526 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=1811, Invalid=6561, Unknown=0, NotChecked=0, Total=8372 [2022-07-13 17:59:47,561 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 1214 mSDsluCounter, 652 mSDsCounter, 0 mSdLazyCounter, 1985 mSolverCounterSat, 701 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1217 SdHoareTripleChecker+Valid, 747 SdHoareTripleChecker+Invalid, 2686 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 701 IncrementalHoareTripleChecker+Valid, 1985 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-07-13 17:59:47,561 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1217 Valid, 747 Invalid, 2686 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [701 Valid, 1985 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-07-13 17:59:47,561 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-13 17:59:47,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-13 17:59:47,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 17:59:47,562 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-13 17:59:47,562 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 107 [2022-07-13 17:59:47,562 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 17:59:47,562 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 17:59:47,563 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 5.3478260869565215) internal successors, (123), 16 states have internal predecessors, (123), 7 states have call successors, (25), 9 states have call predecessors, (25), 11 states have return successors, (25), 9 states have call predecessors, (25), 7 states have call successors, (25) [2022-07-13 17:59:47,563 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-13 17:59:47,563 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-13 17:59:47,565 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-13 17:59:47,593 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-13 17:59:47,766 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-13 17:59:47,767 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-13 17:59:53,276 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 751 758) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= 0 ~methaneLevelCritical~0)) (not (<= ~waterLevel~0 1)) (= 0 ~systemActive~0)) [2022-07-13 17:59:53,276 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 751 758) no Hoare annotation was computed. [2022-07-13 17:59:53,277 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 751 758) no Hoare annotation was computed. [2022-07-13 17:59:53,278 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 641 647) no Hoare annotation was computed. [2022-07-13 17:59:53,278 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 641 647) the Hoare annotation is: true [2022-07-13 17:59:53,278 INFO L895 garLoopResultBuilder]: At program point L566(lines 561 569) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-13 17:59:53,278 INFO L895 garLoopResultBuilder]: At program point L694(line 694) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-13 17:59:53,278 INFO L899 garLoopResultBuilder]: For program point L694-1(lines 675 699) no Hoare annotation was computed. [2022-07-13 17:59:53,278 INFO L895 garLoopResultBuilder]: At program point L849(lines 834 852) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-13 17:59:53,278 INFO L899 garLoopResultBuilder]: For program point L843(lines 843 847) no Hoare annotation was computed. [2022-07-13 17:59:53,279 INFO L899 garLoopResultBuilder]: For program point L843-2(lines 843 847) no Hoare annotation was computed. [2022-07-13 17:59:53,279 INFO L895 garLoopResultBuilder]: At program point L689(line 689) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-13 17:59:53,279 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 675 699) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-13 17:59:53,279 INFO L895 garLoopResultBuilder]: At program point L685(line 685) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-13 17:59:53,279 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 675 699) no Hoare annotation was computed. [2022-07-13 17:59:53,279 INFO L899 garLoopResultBuilder]: For program point L683(lines 683 691) no Hoare annotation was computed. [2022-07-13 17:59:53,279 INFO L899 garLoopResultBuilder]: For program point L679(lines 679 696) no Hoare annotation was computed. [2022-07-13 17:59:53,280 INFO L899 garLoopResultBuilder]: For program point L498-1(lines 494 505) no Hoare annotation was computed. [2022-07-13 17:59:53,280 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 494 505) the Hoare annotation is: (let ((.cse0 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (not (<= 0 |old(~methaneLevelCritical~0)|))) (.cse3 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (<= 1 ~pumpRunning~0)) .cse1 .cse2 .cse3))) [2022-07-13 17:59:53,280 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 494 505) no Hoare annotation was computed. [2022-07-13 17:59:53,280 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 931 960) no Hoare annotation was computed. [2022-07-13 17:59:53,280 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 931 960) the Hoare annotation is: true [2022-07-13 17:59:53,280 INFO L902 garLoopResultBuilder]: At program point L956(lines 931 960) the Hoare annotation is: true [2022-07-13 17:59:53,280 INFO L899 garLoopResultBuilder]: For program point L952(line 952) no Hoare annotation was computed. [2022-07-13 17:59:53,281 INFO L899 garLoopResultBuilder]: For program point L945(lines 945 949) no Hoare annotation was computed. [2022-07-13 17:59:53,284 INFO L902 garLoopResultBuilder]: At program point L945-1(lines 945 949) the Hoare annotation is: true [2022-07-13 17:59:53,285 INFO L899 garLoopResultBuilder]: For program point L942(line 942) no Hoare annotation was computed. [2022-07-13 17:59:53,285 INFO L902 garLoopResultBuilder]: At program point L941-2(lines 941 955) the Hoare annotation is: true [2022-07-13 17:59:53,285 INFO L902 garLoopResultBuilder]: At program point L937(line 937) the Hoare annotation is: true [2022-07-13 17:59:53,285 INFO L899 garLoopResultBuilder]: For program point L937-1(line 937) no Hoare annotation was computed. [2022-07-13 17:59:53,285 INFO L895 garLoopResultBuilder]: At program point L543(lines 538 546) the Hoare annotation is: (let ((.cse8 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse0 .cse3 .cse2 .cse4) (let ((.cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6 .cse7 .cse8) .cse9 .cse1 .cse2 .cse4 (and .cse10 .cse5 .cse6 .cse7 .cse8))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse8) (let ((.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and (<= 1 ~pumpRunning~0) .cse6 .cse11) (and .cse10 .cse5 .cse6 .cse11) .cse1 .cse2 .cse4)) (or .cse9 .cse3 .cse2 .cse4))) [2022-07-13 17:59:53,285 INFO L899 garLoopResultBuilder]: For program point L81(lines 81 87) no Hoare annotation was computed. [2022-07-13 17:59:53,285 INFO L899 garLoopResultBuilder]: For program point L77(lines 77 90) no Hoare annotation was computed. [2022-07-13 17:59:53,286 INFO L895 garLoopResultBuilder]: At program point L77-1(lines 62 94) the Hoare annotation is: (let ((.cse1 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0))) (let ((.cse10 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse11 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse3 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0))) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse16 (not .cse1)) (.cse7 (= 0 ~systemActive~0)) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (<= 1 ~pumpRunning~0) .cse1 .cse2) .cse3 (and .cse4 .cse5 .cse1 .cse2) .cse6 .cse7 .cse8) (or (and .cse4 .cse5 .cse9 .cse1 .cse10 .cse11) (and .cse12 .cse5 .cse9 .cse1 .cse10 .cse11) .cse13 .cse3 .cse6 .cse7 .cse8) (or .cse14 .cse13 .cse15 .cse10 .cse7) (or .cse0 .cse15 (and .cse4 .cse2 .cse16) .cse7 .cse8) (or .cse14 .cse0 (and .cse9 .cse11) .cse3 .cse6 .cse7) (or (and .cse12 .cse5 .cse16) .cse13 .cse15 (and .cse4 .cse5 .cse16) .cse7 .cse8)))) [2022-07-13 17:59:53,286 INFO L895 garLoopResultBuilder]: At program point L775(lines 770 778) the Hoare annotation is: (let ((.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2) (or .cse0 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse3 .cse1 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse1 .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse3 .cse1))) [2022-07-13 17:59:53,286 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 617 640) no Hoare annotation was computed. [2022-07-13 17:59:53,286 INFO L899 garLoopResultBuilder]: For program point L709(lines 709 717) no Hoare annotation was computed. [2022-07-13 17:59:53,287 INFO L895 garLoopResultBuilder]: At program point L69(line 69) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse1 .cse5 .cse6) .cse7 .cse3 .cse4)) (or (and .cse1 .cse5 .cse2) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse7 (and (<= 1 ~pumpRunning~0) .cse2) .cse3 .cse4))) [2022-07-13 17:59:53,287 INFO L899 garLoopResultBuilder]: For program point L69-1(line 69) no Hoare annotation was computed. [2022-07-13 17:59:53,288 INFO L899 garLoopResultBuilder]: For program point L705(lines 705 722) no Hoare annotation was computed. [2022-07-13 17:59:53,288 INFO L899 garLoopResultBuilder]: For program point L474(lines 474 478) no Hoare annotation was computed. [2022-07-13 17:59:53,288 INFO L895 garLoopResultBuilder]: At program point L474-2(lines 470 481) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2022-07-13 17:59:53,288 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-07-13 17:59:53,288 INFO L899 garLoopResultBuilder]: For program point L628-1(lines 628 634) no Hoare annotation was computed. [2022-07-13 17:59:53,288 INFO L895 garLoopResultBuilder]: At program point L715(line 715) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2022-07-13 17:59:53,289 INFO L895 garLoopResultBuilder]: At program point L711(line 711) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2022-07-13 17:59:53,289 INFO L899 garLoopResultBuilder]: For program point L71(lines 71 91) no Hoare annotation was computed. [2022-07-13 17:59:53,289 INFO L895 garLoopResultBuilder]: At program point L707(line 707) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2022-07-13 17:59:53,289 INFO L899 garLoopResultBuilder]: For program point L707-1(line 707) no Hoare annotation was computed. [2022-07-13 17:59:53,289 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2))) [2022-07-13 17:59:53,289 INFO L895 garLoopResultBuilder]: At program point L720(line 720) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 .cse2))) [2022-07-13 17:59:53,290 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 617 640) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2 .cse3) (or (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1 .cse2 .cse3))) [2022-07-13 17:59:53,290 INFO L895 garLoopResultBuilder]: At program point L720-1(lines 701 725) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse1 .cse5 .cse6) .cse7 .cse3 .cse4)) (or (and .cse1 .cse5 .cse2) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse7 (and (<= 1 ~pumpRunning~0) .cse2) .cse3 .cse4))) [2022-07-13 17:59:53,290 INFO L899 garLoopResultBuilder]: For program point L621-1(lines 620 639) no Hoare annotation was computed. [2022-07-13 17:59:53,290 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 617 640) no Hoare annotation was computed. [2022-07-13 17:59:53,290 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-07-13 17:59:53,291 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 506 514) the Hoare annotation is: true [2022-07-13 17:59:53,291 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 506 514) no Hoare annotation was computed. [2022-07-13 17:59:53,291 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 506 514) no Hoare annotation was computed. [2022-07-13 17:59:53,291 INFO L895 garLoopResultBuilder]: At program point L989(lines 985 991) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~11#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:59:53,291 INFO L899 garLoopResultBuilder]: For program point L911(lines 911 915) no Hoare annotation was computed. [2022-07-13 17:59:53,292 INFO L895 garLoopResultBuilder]: At program point L589(lines 585 591) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:59:53,292 INFO L895 garLoopResultBuilder]: At program point L911-2(lines 903 916) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2022-07-13 17:59:53,293 INFO L899 garLoopResultBuilder]: For program point L874(lines 873 920) no Hoare annotation was computed. [2022-07-13 17:59:53,293 INFO L899 garLoopResultBuilder]: For program point L903(lines 903 916) no Hoare annotation was computed. [2022-07-13 17:59:53,293 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-13 17:59:53,293 INFO L895 garLoopResultBuilder]: At program point L895(line 895) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2022-07-13 17:59:53,294 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-13 17:59:53,294 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-13 17:59:53,294 INFO L902 garLoopResultBuilder]: At program point L924(lines 863 928) the Hoare annotation is: true [2022-07-13 17:59:53,294 INFO L895 garLoopResultBuilder]: At program point L858(lines 853 860) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2022-07-13 17:59:53,294 INFO L899 garLoopResultBuilder]: For program point L883(lines 883 889) no Hoare annotation was computed. [2022-07-13 17:59:53,294 INFO L899 garLoopResultBuilder]: For program point L883-1(lines 883 889) no Hoare annotation was computed. [2022-07-13 17:59:53,295 INFO L899 garLoopResultBuilder]: For program point L875(lines 875 879) no Hoare annotation was computed. [2022-07-13 17:59:53,295 INFO L902 garLoopResultBuilder]: At program point L999(lines 992 1001) the Hoare annotation is: true [2022-07-13 17:59:53,295 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-13 17:59:53,295 INFO L895 garLoopResultBuilder]: At program point L921(lines 872 922) the Hoare annotation is: false [2022-07-13 17:59:53,295 INFO L899 garLoopResultBuilder]: For program point L1012(lines 1012 1019) no Hoare annotation was computed. [2022-07-13 17:59:53,295 INFO L899 garLoopResultBuilder]: For program point L1012-2(lines 1012 1019) no Hoare annotation was computed. [2022-07-13 17:59:53,295 INFO L899 garLoopResultBuilder]: For program point L893(lines 893 899) no Hoare annotation was computed. [2022-07-13 17:59:53,295 INFO L902 garLoopResultBuilder]: At program point L1021(lines 1002 1024) the Hoare annotation is: true [2022-07-13 17:59:53,296 INFO L895 garLoopResultBuilder]: At program point L604(lines 599 607) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:59:53,296 INFO L899 garLoopResultBuilder]: For program point L893-1(lines 893 899) no Hoare annotation was computed. [2022-07-13 17:59:53,296 INFO L895 garLoopResultBuilder]: At program point L918(lines 873 920) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse9 .cse2 .cse3 .cse5 .cse8 .cse6))) [2022-07-13 17:59:53,296 INFO L895 garLoopResultBuilder]: At program point L885(line 885) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~11#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse5 .cse8 .cse6) (and .cse7 .cse9 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse9 .cse2 .cse3 .cse5 .cse8 .cse6))) [2022-07-13 17:59:53,297 INFO L895 garLoopResultBuilder]: At program point L596(lines 592 598) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-07-13 17:59:53,297 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 649 673) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-13 17:59:53,297 INFO L895 garLoopResultBuilder]: At program point L830(lines 815 833) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (= ~pumpRunning~0 0))) (or (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse2 (and .cse3 .cse1))))) [2022-07-13 17:59:53,298 INFO L895 garLoopResultBuilder]: At program point L731(lines 726 733) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0 1)) (.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|))) (or (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) .cse4 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse5 (and .cse3 .cse1 .cse4) .cse6 .cse0 .cse2)) (or .cse5 (not (<= 1 ~methaneLevelCritical~0)) .cse6 .cse2))) [2022-07-13 17:59:53,298 INFO L899 garLoopResultBuilder]: For program point L824(lines 824 828) no Hoare annotation was computed. [2022-07-13 17:59:53,298 INFO L895 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse2 (and (= ~pumpRunning~0 0) .cse1)))) [2022-07-13 17:59:53,298 INFO L899 garLoopResultBuilder]: For program point L824-2(lines 824 828) no Hoare annotation was computed. [2022-07-13 17:59:53,298 INFO L899 garLoopResultBuilder]: For program point L657(lines 657 665) no Hoare annotation was computed. [2022-07-13 17:59:53,299 INFO L899 garLoopResultBuilder]: For program point L653(lines 653 670) no Hoare annotation was computed. [2022-07-13 17:59:53,299 INFO L895 garLoopResultBuilder]: At program point L556(lines 547 560) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse2 (and .cse3 .cse1))))) [2022-07-13 17:59:53,299 INFO L895 garLoopResultBuilder]: At program point L668(line 668) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not (<= ~waterLevel~0 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 .cse1))) [2022-07-13 17:59:53,299 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 649 673) no Hoare annotation was computed. [2022-07-13 17:59:53,299 INFO L899 garLoopResultBuilder]: For program point L668-1(lines 649 673) no Hoare annotation was computed. [2022-07-13 17:59:53,299 INFO L899 garLoopResultBuilder]: For program point L551(lines 551 557) no Hoare annotation was computed. [2022-07-13 17:59:53,299 INFO L899 garLoopResultBuilder]: For program point L741(lines 741 747) no Hoare annotation was computed. [2022-07-13 17:59:53,300 INFO L895 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 (and .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse2 (and .cse3 .cse1))))) [2022-07-13 17:59:53,300 INFO L895 garLoopResultBuilder]: At program point L741-2(lines 734 750) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (<= ~waterLevel~0 1)) (.cse12 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0)) (.cse6 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse7 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|)) (.cse8 (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|)) (.cse9 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse11 (<= ~methaneLevelCritical~0 0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 (not .cse1) .cse2) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|))) (or (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) .cse10 (and .cse3 .cse1 .cse5) (not .cse11) .cse12 .cse0 .cse2)) (let ((.cse13 (= ~pumpRunning~0 0)) (.cse14 (or (not (= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|)) (and (< 0 (+ ~methaneLevelCritical~0 1)) .cse11)))) (or .cse10 (and .cse13 .cse1 .cse14) (not (<= 1 ~methaneLevelCritical~0)) .cse12 .cse2 (and .cse13 .cse4 .cse6 .cse7 .cse14 .cse8 .cse9))))) [2022-07-13 17:59:53,300 INFO L899 garLoopResultBuilder]: For program point L739-1(line 739) no Hoare annotation was computed. [2022-07-13 17:59:53,300 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 482 493) no Hoare annotation was computed. [2022-07-13 17:59:53,300 INFO L899 garLoopResultBuilder]: For program point L486-1(lines 482 493) no Hoare annotation was computed. [2022-07-13 17:59:53,300 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 482 493) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse3 .cse4 .cse6) (or .cse0 .cse5 .cse7 .cse3 .cse4) (or .cse2 (not (<= ~methaneLevelCritical~0 0)) .cse7 .cse3 .cse4 .cse6))) [2022-07-13 17:59:53,300 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 759 769) the Hoare annotation is: true [2022-07-13 17:59:53,301 INFO L902 garLoopResultBuilder]: At program point L764(line 764) the Hoare annotation is: true [2022-07-13 17:59:53,301 INFO L899 garLoopResultBuilder]: For program point L764-1(line 764) no Hoare annotation was computed. [2022-07-13 17:59:53,301 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 759 769) no Hoare annotation was computed. [2022-07-13 17:59:53,301 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 759 769) no Hoare annotation was computed. [2022-07-13 17:59:53,304 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 17:59:53,306 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-13 17:59:53,346 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.07 05:59:53 BoogieIcfgContainer [2022-07-13 17:59:53,346 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-13 17:59:53,347 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-13 17:59:53,347 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-13 17:59:53,347 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-13 17:59:53,347 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 05:59:37" (3/4) ... [2022-07-13 17:59:53,350 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-13 17:59:53,361 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-13 17:59:53,361 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-13 17:59:53,361 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-13 17:59:53,361 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-13 17:59:53,361 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-13 17:59:53,361 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-07-13 17:59:53,362 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 17:59:53,362 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-13 17:59:53,362 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-13 17:59:53,362 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-13 17:59:53,372 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-07-13 17:59:53,374 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-13 17:59:53,375 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-13 17:59:53,375 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-13 17:59:53,376 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-13 17:59:53,376 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:59:53,376 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 17:59:53,399 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 17:59:53,400 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-07-13 17:59:53,400 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2022-07-13 17:59:53,401 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 17:59:53,402 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 17:59:53,403 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2022-07-13 17:59:53,404 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical <= 0)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || (((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || waterLevel <= \old(waterLevel)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 17:59:53,404 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result == 1) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result <= 1)) && (((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 17:59:53,404 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((((((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel <= 1) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0)))) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || ((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0))) && 1 <= tmp) && \result == 0)) [2022-07-13 17:59:53,404 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) [2022-07-13 17:59:53,405 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-13 17:59:53,405 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) [2022-07-13 17:59:53,405 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-13 17:59:53,405 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-07-13 17:59:53,408 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && \result == 0) || !(\old(pumpRunning) == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) [2022-07-13 17:59:53,408 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) [2022-07-13 17:59:53,445 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-13 17:59:53,445 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-13 17:59:53,446 INFO L158 Benchmark]: Toolchain (without parser) took 16773.54ms. Allocated memory was 96.5MB in the beginning and 182.5MB in the end (delta: 86.0MB). Free memory was 54.1MB in the beginning and 107.1MB in the end (delta: -53.0MB). Peak memory consumption was 30.9MB. Max. memory is 16.1GB. [2022-07-13 17:59:53,446 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 96.5MB. Free memory is still 71.2MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 17:59:53,446 INFO L158 Benchmark]: CACSL2BoogieTranslator took 443.20ms. Allocated memory is still 96.5MB. Free memory was 53.9MB in the beginning and 61.3MB in the end (delta: -7.4MB). Peak memory consumption was 4.3MB. Max. memory is 16.1GB. [2022-07-13 17:59:53,446 INFO L158 Benchmark]: Boogie Procedure Inliner took 59.18ms. Allocated memory is still 96.5MB. Free memory was 61.3MB in the beginning and 58.8MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:59:53,447 INFO L158 Benchmark]: Boogie Preprocessor took 38.10ms. Allocated memory is still 96.5MB. Free memory was 58.8MB in the beginning and 57.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 17:59:53,447 INFO L158 Benchmark]: RCFGBuilder took 570.37ms. Allocated memory is still 96.5MB. Free memory was 56.9MB in the beginning and 38.5MB in the end (delta: 18.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-07-13 17:59:53,448 INFO L158 Benchmark]: TraceAbstraction took 15556.41ms. Allocated memory was 96.5MB in the beginning and 182.5MB in the end (delta: 86.0MB). Free memory was 38.0MB in the beginning and 113.4MB in the end (delta: -75.4MB). Peak memory consumption was 83.4MB. Max. memory is 16.1GB. [2022-07-13 17:59:53,448 INFO L158 Benchmark]: Witness Printer took 98.52ms. Allocated memory is still 182.5MB. Free memory was 113.4MB in the beginning and 107.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-13 17:59:53,449 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 96.5MB. Free memory is still 71.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 443.20ms. Allocated memory is still 96.5MB. Free memory was 53.9MB in the beginning and 61.3MB in the end (delta: -7.4MB). Peak memory consumption was 4.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 59.18ms. Allocated memory is still 96.5MB. Free memory was 61.3MB in the beginning and 58.8MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 38.10ms. Allocated memory is still 96.5MB. Free memory was 58.8MB in the beginning and 57.1MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 570.37ms. Allocated memory is still 96.5MB. Free memory was 56.9MB in the beginning and 38.5MB in the end (delta: 18.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 15556.41ms. Allocated memory was 96.5MB in the beginning and 182.5MB in the end (delta: 86.0MB). Free memory was 38.0MB in the beginning and 113.4MB in the end (delta: -75.4MB). Peak memory consumption was 83.4MB. Max. memory is 16.1GB. * Witness Printer took 98.52ms. Allocated memory is still 182.5MB. Free memory was 113.4MB in the beginning and 107.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 111 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 15.4s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3376 SdHoareTripleChecker+Valid, 3.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3345 mSDsluCounter, 5237 SdHoareTripleChecker+Invalid, 3.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3643 mSDsCounter, 1540 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5876 IncrementalHoareTripleChecker+Invalid, 7416 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1540 mSolverCounterUnsat, 1594 mSDtfsCounter, 5876 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 654 GetRequests, 429 SyntacticMatches, 6 SemanticMatches, 219 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2969 ImplicationChecksByTransitivity, 1.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=906occurred in iteration=9, InterpolantAutomatonStates: 192, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 166 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 2597 PreInvPairs, 2945 NumberOfFragments, 2334 HoareAnnotationTreeSize, 2597 FomulaSimplifications, 2998 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 51 FomulaSimplificationsInter, 17436 FormulaSimplificationTreeSizeReductionInter, 4.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 827 NumberOfCodeBlocks, 827 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 919 ConstructedInterpolants, 0 QuantifiedInterpolants, 2244 SizeOfPredicates, 7 NumberOfNonLiveVariables, 885 ConjunctsInSsa, 30 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 96/135 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 547]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result == 1) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result <= 1)) && (((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 561]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 701]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 815]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && \result == 0) || !(\old(pumpRunning) == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (pumpRunning == 0 && waterLevel <= 1)) - InvariantResult [Line: 853]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical <= 0)) || (((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((((((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || (((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || waterLevel <= \old(waterLevel)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && ((((((((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && waterLevel <= 1) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0)))) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) || ((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && (!(0 == tmp) || (0 < methaneLevelCritical + 1 && methaneLevelCritical <= 0))) && 1 <= tmp) && \result == 0)) - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((((((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 592]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 585]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 931]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 470]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 992]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 770]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-07-13 17:59:53,519 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE