./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f4b24e32 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product63.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7c7779f94f1738e754b88f9a8a8e36de7065a4e94578f4135106bd0ff9ddb13d --- Real Ultimate output --- This is Ultimate 0.2.2-?-f4b24e3 [2022-07-13 18:00:19,752 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-13 18:00:19,763 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-13 18:00:19,787 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-13 18:00:19,787 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-13 18:00:19,788 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-13 18:00:19,792 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-13 18:00:19,796 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-13 18:00:19,797 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-13 18:00:19,801 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-13 18:00:19,801 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-13 18:00:19,803 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-13 18:00:19,803 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-13 18:00:19,805 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-13 18:00:19,806 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-13 18:00:19,807 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-13 18:00:19,808 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-13 18:00:19,809 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-13 18:00:19,811 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-13 18:00:19,815 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-13 18:00:19,817 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-13 18:00:19,818 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-13 18:00:19,818 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-13 18:00:19,819 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-13 18:00:19,820 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-13 18:00:19,825 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-13 18:00:19,825 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-13 18:00:19,826 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-13 18:00:19,827 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-13 18:00:19,827 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-13 18:00:19,828 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-13 18:00:19,828 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-13 18:00:19,829 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-13 18:00:19,830 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-13 18:00:19,830 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-13 18:00:19,831 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-13 18:00:19,831 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-13 18:00:19,832 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-13 18:00:19,832 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-13 18:00:19,832 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-13 18:00:19,833 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-13 18:00:19,834 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-13 18:00:19,835 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-07-13 18:00:19,863 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-13 18:00:19,864 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-13 18:00:19,864 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-13 18:00:19,864 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-13 18:00:19,865 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-13 18:00:19,865 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-13 18:00:19,865 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-13 18:00:19,865 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-13 18:00:19,866 INFO L138 SettingsManager]: * Use SBE=true [2022-07-13 18:00:19,866 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-13 18:00:19,867 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-13 18:00:19,867 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-13 18:00:19,867 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-13 18:00:19,867 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-13 18:00:19,867 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-13 18:00:19,867 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-13 18:00:19,868 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-13 18:00:19,868 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-13 18:00:19,869 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-13 18:00:19,869 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-13 18:00:19,869 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-13 18:00:19,869 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-13 18:00:19,869 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-13 18:00:19,870 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-13 18:00:19,870 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 18:00:19,870 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-13 18:00:19,870 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-13 18:00:19,870 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-13 18:00:19,870 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-13 18:00:19,871 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-13 18:00:19,871 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-13 18:00:19,871 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-13 18:00:19,871 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-13 18:00:19,871 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7c7779f94f1738e754b88f9a8a8e36de7065a4e94578f4135106bd0ff9ddb13d [2022-07-13 18:00:20,198 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-13 18:00:20,218 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-13 18:00:20,221 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-13 18:00:20,222 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-13 18:00:20,235 INFO L275 PluginConnector]: CDTParser initialized [2022-07-13 18:00:20,237 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product63.cil.c [2022-07-13 18:00:20,312 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7ddf745d4/fdb68c8143774f89aea35d1fa23fdb24/FLAG80c6b0003 [2022-07-13 18:00:20,875 INFO L306 CDTParser]: Found 1 translation units. [2022-07-13 18:00:20,878 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product63.cil.c [2022-07-13 18:00:20,889 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7ddf745d4/fdb68c8143774f89aea35d1fa23fdb24/FLAG80c6b0003 [2022-07-13 18:00:21,150 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7ddf745d4/fdb68c8143774f89aea35d1fa23fdb24 [2022-07-13 18:00:21,153 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-13 18:00:21,154 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-13 18:00:21,156 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-13 18:00:21,157 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-13 18:00:21,169 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-13 18:00:21,170 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 06:00:21" (1/1) ... [2022-07-13 18:00:21,170 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6f47a822 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:21, skipping insertion in model container [2022-07-13 18:00:21,171 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 06:00:21" (1/1) ... [2022-07-13 18:00:21,176 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-13 18:00:21,245 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-13 18:00:21,600 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product63.cil.c[15018,15031] [2022-07-13 18:00:21,659 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 18:00:21,683 INFO L203 MainTranslator]: Completed pre-run [2022-07-13 18:00:21,771 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product63.cil.c[15018,15031] [2022-07-13 18:00:21,791 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 18:00:21,825 INFO L208 MainTranslator]: Completed translation [2022-07-13 18:00:21,826 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:21 WrapperNode [2022-07-13 18:00:21,826 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-13 18:00:21,839 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-13 18:00:21,840 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-13 18:00:21,840 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-13 18:00:21,845 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:21" (1/1) ... [2022-07-13 18:00:21,865 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:21" (1/1) ... [2022-07-13 18:00:21,921 INFO L137 Inliner]: procedures = 58, calls = 162, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 294 [2022-07-13 18:00:21,922 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-13 18:00:21,922 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-13 18:00:21,922 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-13 18:00:21,923 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-13 18:00:21,928 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:21" (1/1) ... [2022-07-13 18:00:21,928 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:21" (1/1) ... [2022-07-13 18:00:21,930 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:21" (1/1) ... [2022-07-13 18:00:21,930 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:21" (1/1) ... [2022-07-13 18:00:21,956 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:21" (1/1) ... [2022-07-13 18:00:21,959 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:21" (1/1) ... [2022-07-13 18:00:21,960 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:21" (1/1) ... [2022-07-13 18:00:21,962 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-13 18:00:21,982 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-13 18:00:21,982 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-13 18:00:21,982 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-13 18:00:21,983 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:21" (1/1) ... [2022-07-13 18:00:21,999 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-13 18:00:22,008 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:22,022 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-13 18:00:22,051 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-13 18:00:22,084 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-13 18:00:22,084 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-07-13 18:00:22,085 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-07-13 18:00:22,085 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-07-13 18:00:22,085 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-07-13 18:00:22,085 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-07-13 18:00:22,085 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-07-13 18:00:22,085 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 18:00:22,086 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 18:00:22,086 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-07-13 18:00:22,086 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-07-13 18:00:22,086 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-07-13 18:00:22,086 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-07-13 18:00:22,086 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-07-13 18:00:22,086 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-07-13 18:00:22,086 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-07-13 18:00:22,087 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-07-13 18:00:22,087 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-13 18:00:22,087 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-07-13 18:00:22,087 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-07-13 18:00:22,087 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-13 18:00:22,087 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-13 18:00:22,191 INFO L234 CfgBuilder]: Building ICFG [2022-07-13 18:00:22,208 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-13 18:00:22,615 INFO L275 CfgBuilder]: Performing block encoding [2022-07-13 18:00:22,620 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-13 18:00:22,625 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-07-13 18:00:22,627 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 06:00:22 BoogieIcfgContainer [2022-07-13 18:00:22,628 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-13 18:00:22,629 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-13 18:00:22,630 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-13 18:00:22,632 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-13 18:00:22,633 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.07 06:00:21" (1/3) ... [2022-07-13 18:00:22,633 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@637788d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 06:00:22, skipping insertion in model container [2022-07-13 18:00:22,634 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 06:00:21" (2/3) ... [2022-07-13 18:00:22,634 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@637788d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.07 06:00:22, skipping insertion in model container [2022-07-13 18:00:22,634 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 06:00:22" (3/3) ... [2022-07-13 18:00:22,635 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product63.cil.c [2022-07-13 18:00:22,646 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-13 18:00:22,646 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-13 18:00:22,715 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-13 18:00:22,737 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@78954e73, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@4ad27d68 [2022-07-13 18:00:22,738 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-13 18:00:22,742 INFO L276 IsEmpty]: Start isEmpty. Operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-07-13 18:00:22,748 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-07-13 18:00:22,748 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:22,749 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:22,749 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:22,754 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:22,754 INFO L85 PathProgramCache]: Analyzing trace with hash 1070951928, now seen corresponding path program 1 times [2022-07-13 18:00:22,770 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:22,770 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1416899530] [2022-07-13 18:00:22,770 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:22,771 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:22,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:23,091 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 18:00:23,092 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:23,093 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1416899530] [2022-07-13 18:00:23,093 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1416899530] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:23,093 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:23,093 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-13 18:00:23,095 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2902026] [2022-07-13 18:00:23,104 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:23,107 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-07-13 18:00:23,108 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:23,142 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-07-13 18:00:23,148 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 18:00:23,150 INFO L87 Difference]: Start difference. First operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 18:00:23,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:23,218 INFO L93 Difference]: Finished difference Result 206 states and 281 transitions. [2022-07-13 18:00:23,219 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-13 18:00:23,220 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-07-13 18:00:23,236 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:23,242 INFO L225 Difference]: With dead ends: 206 [2022-07-13 18:00:23,256 INFO L226 Difference]: Without dead ends: 98 [2022-07-13 18:00:23,259 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-07-13 18:00:23,262 INFO L413 NwaCegarLoop]: 137 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:23,262 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 18:00:23,283 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2022-07-13 18:00:23,337 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 98. [2022-07-13 18:00:23,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 72 states have (on average 1.3194444444444444) internal successors, (95), 82 states have internal predecessors, (95), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-07-13 18:00:23,340 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 128 transitions. [2022-07-13 18:00:23,341 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 128 transitions. Word has length 19 [2022-07-13 18:00:23,341 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:23,342 INFO L495 AbstractCegarLoop]: Abstraction has 98 states and 128 transitions. [2022-07-13 18:00:23,342 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 18:00:23,342 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 128 transitions. [2022-07-13 18:00:23,343 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-07-13 18:00:23,343 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:23,344 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:23,344 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-13 18:00:23,344 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:23,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:23,345 INFO L85 PathProgramCache]: Analyzing trace with hash -630554312, now seen corresponding path program 1 times [2022-07-13 18:00:23,345 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:23,345 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2133693243] [2022-07-13 18:00:23,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:23,346 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:23,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:23,458 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 18:00:23,458 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:23,458 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2133693243] [2022-07-13 18:00:23,459 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2133693243] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:23,459 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:23,459 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 18:00:23,459 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [746654289] [2022-07-13 18:00:23,459 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:23,460 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 18:00:23,465 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:23,466 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 18:00:23,467 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 18:00:23,468 INFO L87 Difference]: Start difference. First operand 98 states and 128 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 18:00:23,486 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:23,503 INFO L93 Difference]: Finished difference Result 158 states and 206 transitions. [2022-07-13 18:00:23,504 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 18:00:23,505 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-07-13 18:00:23,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:23,511 INFO L225 Difference]: With dead ends: 158 [2022-07-13 18:00:23,511 INFO L226 Difference]: Without dead ends: 89 [2022-07-13 18:00:23,517 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 18:00:23,519 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 16 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 209 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:23,520 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 209 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 18:00:23,522 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2022-07-13 18:00:23,530 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2022-07-13 18:00:23,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 66 states have (on average 1.3333333333333333) internal successors, (88), 76 states have internal predecessors, (88), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2022-07-13 18:00:23,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 116 transitions. [2022-07-13 18:00:23,547 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 116 transitions. Word has length 20 [2022-07-13 18:00:23,548 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:23,548 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 116 transitions. [2022-07-13 18:00:23,549 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 18:00:23,549 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 116 transitions. [2022-07-13 18:00:23,550 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-07-13 18:00:23,550 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:23,551 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:23,551 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-13 18:00:23,551 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:23,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:23,555 INFO L85 PathProgramCache]: Analyzing trace with hash 735150912, now seen corresponding path program 1 times [2022-07-13 18:00:23,555 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:23,555 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2013073987] [2022-07-13 18:00:23,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:23,556 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:23,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:23,687 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 18:00:23,687 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:23,688 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2013073987] [2022-07-13 18:00:23,688 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2013073987] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:23,688 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:23,688 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 18:00:23,688 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1503545601] [2022-07-13 18:00:23,688 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:23,689 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 18:00:23,689 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:23,689 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 18:00:23,689 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-07-13 18:00:23,690 INFO L87 Difference]: Start difference. First operand 89 states and 116 transitions. Second operand has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 18:00:24,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:24,009 INFO L93 Difference]: Finished difference Result 290 states and 385 transitions. [2022-07-13 18:00:24,010 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-13 18:00:24,010 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-07-13 18:00:24,011 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:24,031 INFO L225 Difference]: With dead ends: 290 [2022-07-13 18:00:24,032 INFO L226 Difference]: Without dead ends: 208 [2022-07-13 18:00:24,035 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-13 18:00:24,039 INFO L413 NwaCegarLoop]: 138 mSDtfsCounter, 310 mSDsluCounter, 342 mSDsCounter, 0 mSdLazyCounter, 127 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 310 SdHoareTripleChecker+Valid, 480 SdHoareTripleChecker+Invalid, 168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 127 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:24,040 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [310 Valid, 480 Invalid, 168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 127 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-13 18:00:24,042 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 208 states. [2022-07-13 18:00:24,086 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 208 to 202. [2022-07-13 18:00:24,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 202 states, 149 states have (on average 1.3624161073825503) internal successors, (203), 171 states have internal predecessors, (203), 32 states have call successors, (32), 20 states have call predecessors, (32), 20 states have return successors, (33), 20 states have call predecessors, (33), 32 states have call successors, (33) [2022-07-13 18:00:24,089 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 202 states to 202 states and 268 transitions. [2022-07-13 18:00:24,089 INFO L78 Accepts]: Start accepts. Automaton has 202 states and 268 transitions. Word has length 24 [2022-07-13 18:00:24,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:24,089 INFO L495 AbstractCegarLoop]: Abstraction has 202 states and 268 transitions. [2022-07-13 18:00:24,089 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 18:00:24,090 INFO L276 IsEmpty]: Start isEmpty. Operand 202 states and 268 transitions. [2022-07-13 18:00:24,093 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-07-13 18:00:24,095 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:24,095 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:24,095 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-13 18:00:24,095 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:24,096 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:24,096 INFO L85 PathProgramCache]: Analyzing trace with hash 769011574, now seen corresponding path program 1 times [2022-07-13 18:00:24,096 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:24,096 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1553390539] [2022-07-13 18:00:24,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:24,097 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:24,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:24,198 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 18:00:24,199 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:24,199 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1553390539] [2022-07-13 18:00:24,199 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1553390539] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:24,199 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:24,199 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 18:00:24,199 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1616154421] [2022-07-13 18:00:24,200 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:24,200 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 18:00:24,200 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:24,201 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 18:00:24,201 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 18:00:24,201 INFO L87 Difference]: Start difference. First operand 202 states and 268 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 18:00:24,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:24,282 INFO L93 Difference]: Finished difference Result 575 states and 793 transitions. [2022-07-13 18:00:24,282 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 18:00:24,282 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-07-13 18:00:24,283 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:24,285 INFO L225 Difference]: With dead ends: 575 [2022-07-13 18:00:24,290 INFO L226 Difference]: Without dead ends: 380 [2022-07-13 18:00:24,291 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-13 18:00:24,308 INFO L413 NwaCegarLoop]: 123 mSDtfsCounter, 87 mSDsluCounter, 349 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 472 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:24,308 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 472 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 18:00:24,309 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 380 states. [2022-07-13 18:00:24,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 380 to 380. [2022-07-13 18:00:24,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 380 states, 278 states have (on average 1.3381294964028776) internal successors, (372), 318 states have internal predecessors, (372), 64 states have call successors, (64), 40 states have call predecessors, (64), 37 states have return successors, (70), 37 states have call predecessors, (70), 64 states have call successors, (70) [2022-07-13 18:00:24,353 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 380 states to 380 states and 506 transitions. [2022-07-13 18:00:24,353 INFO L78 Accepts]: Start accepts. Automaton has 380 states and 506 transitions. Word has length 28 [2022-07-13 18:00:24,354 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:24,354 INFO L495 AbstractCegarLoop]: Abstraction has 380 states and 506 transitions. [2022-07-13 18:00:24,354 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 18:00:24,354 INFO L276 IsEmpty]: Start isEmpty. Operand 380 states and 506 transitions. [2022-07-13 18:00:24,360 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-07-13 18:00:24,360 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:24,360 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:24,360 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-13 18:00:24,360 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:24,361 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:24,361 INFO L85 PathProgramCache]: Analyzing trace with hash 1555028603, now seen corresponding path program 1 times [2022-07-13 18:00:24,361 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:24,361 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [195506040] [2022-07-13 18:00:24,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:24,362 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:24,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:24,466 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 18:00:24,468 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:24,468 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [195506040] [2022-07-13 18:00:24,468 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [195506040] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:24,468 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:24,468 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-13 18:00:24,468 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1740845336] [2022-07-13 18:00:24,469 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:24,470 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-13 18:00:24,470 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:24,470 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 18:00:24,470 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 18:00:24,473 INFO L87 Difference]: Start difference. First operand 380 states and 506 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 18:00:24,529 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:24,529 INFO L93 Difference]: Finished difference Result 870 states and 1181 transitions. [2022-07-13 18:00:24,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 18:00:24,530 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-07-13 18:00:24,530 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:24,534 INFO L225 Difference]: With dead ends: 870 [2022-07-13 18:00:24,534 INFO L226 Difference]: Without dead ends: 497 [2022-07-13 18:00:24,536 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 18:00:24,537 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 67 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:24,540 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 187 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 18:00:24,543 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 497 states. [2022-07-13 18:00:24,591 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 497 to 486. [2022-07-13 18:00:24,592 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 486 states, 368 states have (on average 1.2771739130434783) internal successors, (470), 397 states have internal predecessors, (470), 61 states have call successors, (61), 57 states have call predecessors, (61), 56 states have return successors, (89), 55 states have call predecessors, (89), 61 states have call successors, (89) [2022-07-13 18:00:24,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 486 states to 486 states and 620 transitions. [2022-07-13 18:00:24,611 INFO L78 Accepts]: Start accepts. Automaton has 486 states and 620 transitions. Word has length 30 [2022-07-13 18:00:24,612 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:24,612 INFO L495 AbstractCegarLoop]: Abstraction has 486 states and 620 transitions. [2022-07-13 18:00:24,612 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 18:00:24,612 INFO L276 IsEmpty]: Start isEmpty. Operand 486 states and 620 transitions. [2022-07-13 18:00:24,622 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-07-13 18:00:24,622 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:24,623 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:24,623 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-07-13 18:00:24,624 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:24,624 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:24,624 INFO L85 PathProgramCache]: Analyzing trace with hash -129157540, now seen corresponding path program 1 times [2022-07-13 18:00:24,624 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:24,625 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1376192134] [2022-07-13 18:00:24,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:24,625 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:24,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:24,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 18:00:24,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:24,730 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 18:00:24,731 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:24,731 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1376192134] [2022-07-13 18:00:24,731 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1376192134] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:24,731 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:24,731 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 18:00:24,731 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1568227873] [2022-07-13 18:00:24,732 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:24,732 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 18:00:24,732 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:24,733 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 18:00:24,733 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 18:00:24,733 INFO L87 Difference]: Start difference. First operand 486 states and 620 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 18:00:25,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:25,059 INFO L93 Difference]: Finished difference Result 581 states and 747 transitions. [2022-07-13 18:00:25,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-13 18:00:25,059 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-07-13 18:00:25,060 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:25,062 INFO L225 Difference]: With dead ends: 581 [2022-07-13 18:00:25,062 INFO L226 Difference]: Without dead ends: 579 [2022-07-13 18:00:25,063 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-07-13 18:00:25,064 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 160 mSDsluCounter, 235 mSDsCounter, 0 mSdLazyCounter, 244 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 351 SdHoareTripleChecker+Invalid, 293 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 244 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:25,066 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 351 Invalid, 293 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 244 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-13 18:00:25,067 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 579 states. [2022-07-13 18:00:25,107 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 579 to 550. [2022-07-13 18:00:25,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 550 states, 415 states have (on average 1.2626506024096384) internal successors, (524), 455 states have internal predecessors, (524), 69 states have call successors, (69), 57 states have call predecessors, (69), 65 states have return successors, (110), 61 states have call predecessors, (110), 69 states have call successors, (110) [2022-07-13 18:00:25,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 550 states to 550 states and 703 transitions. [2022-07-13 18:00:25,112 INFO L78 Accepts]: Start accepts. Automaton has 550 states and 703 transitions. Word has length 32 [2022-07-13 18:00:25,113 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:25,113 INFO L495 AbstractCegarLoop]: Abstraction has 550 states and 703 transitions. [2022-07-13 18:00:25,113 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-07-13 18:00:25,114 INFO L276 IsEmpty]: Start isEmpty. Operand 550 states and 703 transitions. [2022-07-13 18:00:25,116 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-13 18:00:25,116 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:25,116 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:25,117 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-07-13 18:00:25,117 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:25,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:25,117 INFO L85 PathProgramCache]: Analyzing trace with hash -1897123065, now seen corresponding path program 1 times [2022-07-13 18:00:25,117 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:25,118 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1491020748] [2022-07-13 18:00:25,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:25,118 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:25,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:25,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 18:00:25,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:25,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-13 18:00:25,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:25,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:25,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:25,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:25,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:25,257 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 18:00:25,258 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:25,258 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1491020748] [2022-07-13 18:00:25,258 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1491020748] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:25,258 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:25,258 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 18:00:25,258 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [984987311] [2022-07-13 18:00:25,258 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:25,259 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 18:00:25,259 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:25,259 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 18:00:25,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 18:00:25,260 INFO L87 Difference]: Start difference. First operand 550 states and 703 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 18:00:25,778 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:25,778 INFO L93 Difference]: Finished difference Result 1071 states and 1420 transitions. [2022-07-13 18:00:25,779 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-13 18:00:25,779 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-07-13 18:00:25,779 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:25,782 INFO L225 Difference]: With dead ends: 1071 [2022-07-13 18:00:25,782 INFO L226 Difference]: Without dead ends: 728 [2022-07-13 18:00:25,783 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2022-07-13 18:00:25,785 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 179 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 259 mSolverCounterSat, 69 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 180 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 328 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 69 IncrementalHoareTripleChecker+Valid, 259 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:25,786 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [180 Valid, 309 Invalid, 328 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [69 Valid, 259 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-13 18:00:25,787 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 728 states. [2022-07-13 18:00:25,826 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 728 to 602. [2022-07-13 18:00:25,843 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 602 states, 457 states have (on average 1.2516411378555798) internal successors, (572), 497 states have internal predecessors, (572), 69 states have call successors, (69), 57 states have call predecessors, (69), 75 states have return successors, (124), 69 states have call predecessors, (124), 69 states have call successors, (124) [2022-07-13 18:00:25,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 602 states to 602 states and 765 transitions. [2022-07-13 18:00:25,847 INFO L78 Accepts]: Start accepts. Automaton has 602 states and 765 transitions. Word has length 55 [2022-07-13 18:00:25,847 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:25,848 INFO L495 AbstractCegarLoop]: Abstraction has 602 states and 765 transitions. [2022-07-13 18:00:25,848 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 18:00:25,848 INFO L276 IsEmpty]: Start isEmpty. Operand 602 states and 765 transitions. [2022-07-13 18:00:25,849 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-13 18:00:25,849 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:25,850 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:25,850 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-07-13 18:00:25,850 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:25,850 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:25,850 INFO L85 PathProgramCache]: Analyzing trace with hash -2031136571, now seen corresponding path program 1 times [2022-07-13 18:00:25,851 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:25,851 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2037184578] [2022-07-13 18:00:25,851 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:25,851 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:25,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:25,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 18:00:25,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:25,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-13 18:00:25,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:25,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:25,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:25,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:25,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:25,977 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 18:00:25,978 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:25,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2037184578] [2022-07-13 18:00:25,978 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2037184578] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:25,978 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:25,978 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 18:00:25,978 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [214030692] [2022-07-13 18:00:25,979 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:25,980 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 18:00:25,980 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:25,980 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 18:00:25,980 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 18:00:25,980 INFO L87 Difference]: Start difference. First operand 602 states and 765 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 18:00:26,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:26,392 INFO L93 Difference]: Finished difference Result 1268 states and 1714 transitions. [2022-07-13 18:00:26,393 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-07-13 18:00:26,393 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-07-13 18:00:26,393 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:26,397 INFO L225 Difference]: With dead ends: 1268 [2022-07-13 18:00:26,397 INFO L226 Difference]: Without dead ends: 873 [2022-07-13 18:00:26,399 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 10 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-07-13 18:00:26,399 INFO L413 NwaCegarLoop]: 161 mSDtfsCounter, 233 mSDsluCounter, 327 mSDsCounter, 0 mSdLazyCounter, 473 mSolverCounterSat, 85 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 236 SdHoareTripleChecker+Valid, 488 SdHoareTripleChecker+Invalid, 558 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 85 IncrementalHoareTripleChecker+Valid, 473 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:26,400 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [236 Valid, 488 Invalid, 558 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [85 Valid, 473 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-07-13 18:00:26,401 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 873 states. [2022-07-13 18:00:26,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 873 to 824. [2022-07-13 18:00:26,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 824 states, 628 states have (on average 1.2356687898089171) internal successors, (776), 676 states have internal predecessors, (776), 93 states have call successors, (93), 81 states have call predecessors, (93), 102 states have return successors, (208), 101 states have call predecessors, (208), 93 states have call successors, (208) [2022-07-13 18:00:26,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 824 states to 824 states and 1077 transitions. [2022-07-13 18:00:26,463 INFO L78 Accepts]: Start accepts. Automaton has 824 states and 1077 transitions. Word has length 55 [2022-07-13 18:00:26,464 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:26,465 INFO L495 AbstractCegarLoop]: Abstraction has 824 states and 1077 transitions. [2022-07-13 18:00:26,465 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 18:00:26,465 INFO L276 IsEmpty]: Start isEmpty. Operand 824 states and 1077 transitions. [2022-07-13 18:00:26,466 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-13 18:00:26,467 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:26,467 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:26,467 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-07-13 18:00:26,467 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:26,468 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:26,468 INFO L85 PathProgramCache]: Analyzing trace with hash -1959162679, now seen corresponding path program 1 times [2022-07-13 18:00:26,468 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:26,468 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [80043847] [2022-07-13 18:00:26,468 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:26,469 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:26,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:26,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 18:00:26,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:26,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-13 18:00:26,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:26,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:26,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:26,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:26,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:26,585 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 18:00:26,585 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:26,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [80043847] [2022-07-13 18:00:26,585 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [80043847] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:26,586 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:26,586 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 18:00:26,586 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [445358626] [2022-07-13 18:00:26,586 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:26,587 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-07-13 18:00:26,587 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:26,587 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 18:00:26,587 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-07-13 18:00:26,588 INFO L87 Difference]: Start difference. First operand 824 states and 1077 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 18:00:26,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:26,939 INFO L93 Difference]: Finished difference Result 1719 states and 2316 transitions. [2022-07-13 18:00:26,939 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-07-13 18:00:26,940 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-07-13 18:00:26,940 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:26,945 INFO L225 Difference]: With dead ends: 1719 [2022-07-13 18:00:26,945 INFO L226 Difference]: Without dead ends: 902 [2022-07-13 18:00:26,948 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-07-13 18:00:26,949 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 160 mSDsluCounter, 244 mSDsCounter, 0 mSdLazyCounter, 311 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 346 SdHoareTripleChecker+Invalid, 374 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 311 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:26,950 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [161 Valid, 346 Invalid, 374 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 311 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-13 18:00:26,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 902 states. [2022-07-13 18:00:26,997 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 902 to 836. [2022-07-13 18:00:26,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 836 states, 640 states have (on average 1.23125) internal successors, (788), 688 states have internal predecessors, (788), 93 states have call successors, (93), 81 states have call predecessors, (93), 102 states have return successors, (208), 101 states have call predecessors, (208), 93 states have call successors, (208) [2022-07-13 18:00:27,002 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 836 states to 836 states and 1089 transitions. [2022-07-13 18:00:27,002 INFO L78 Accepts]: Start accepts. Automaton has 836 states and 1089 transitions. Word has length 55 [2022-07-13 18:00:27,003 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:27,003 INFO L495 AbstractCegarLoop]: Abstraction has 836 states and 1089 transitions. [2022-07-13 18:00:27,003 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 18:00:27,003 INFO L276 IsEmpty]: Start isEmpty. Operand 836 states and 1089 transitions. [2022-07-13 18:00:27,004 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-13 18:00:27,004 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:27,005 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:27,005 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-07-13 18:00:27,005 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:27,005 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:27,005 INFO L85 PathProgramCache]: Analyzing trace with hash -2093176185, now seen corresponding path program 1 times [2022-07-13 18:00:27,005 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:27,006 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [686882200] [2022-07-13 18:00:27,006 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:27,006 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:27,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 18:00:27,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-07-13 18:00:27,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:27,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:27,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,063 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 18:00:27,063 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:27,064 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [686882200] [2022-07-13 18:00:27,064 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [686882200] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:27,064 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 18:00:27,064 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-07-13 18:00:27,064 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1119887354] [2022-07-13 18:00:27,064 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:27,065 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 18:00:27,065 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:27,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 18:00:27,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-07-13 18:00:27,065 INFO L87 Difference]: Start difference. First operand 836 states and 1089 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 18:00:27,243 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:27,243 INFO L93 Difference]: Finished difference Result 1546 states and 2060 transitions. [2022-07-13 18:00:27,244 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 18:00:27,244 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-07-13 18:00:27,245 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:27,248 INFO L225 Difference]: With dead ends: 1546 [2022-07-13 18:00:27,248 INFO L226 Difference]: Without dead ends: 717 [2022-07-13 18:00:27,250 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-07-13 18:00:27,251 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 164 mSDsluCounter, 189 mSDsCounter, 0 mSdLazyCounter, 231 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 290 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 231 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:27,252 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [165 Valid, 289 Invalid, 290 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 231 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 18:00:27,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 717 states. [2022-07-13 18:00:27,275 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 717 to 697. [2022-07-13 18:00:27,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 697 states, 531 states have (on average 1.2241054613935969) internal successors, (650), 570 states have internal predecessors, (650), 82 states have call successors, (82), 70 states have call predecessors, (82), 83 states have return successors, (163), 84 states have call predecessors, (163), 82 states have call successors, (163) [2022-07-13 18:00:27,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 697 states to 697 states and 895 transitions. [2022-07-13 18:00:27,280 INFO L78 Accepts]: Start accepts. Automaton has 697 states and 895 transitions. Word has length 55 [2022-07-13 18:00:27,280 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:27,280 INFO L495 AbstractCegarLoop]: Abstraction has 697 states and 895 transitions. [2022-07-13 18:00:27,280 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-07-13 18:00:27,280 INFO L276 IsEmpty]: Start isEmpty. Operand 697 states and 895 transitions. [2022-07-13 18:00:27,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2022-07-13 18:00:27,283 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:27,284 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:27,284 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-07-13 18:00:27,284 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:27,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:27,284 INFO L85 PathProgramCache]: Analyzing trace with hash 1124052112, now seen corresponding path program 1 times [2022-07-13 18:00:27,285 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:27,285 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [466179188] [2022-07-13 18:00:27,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:27,285 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:27,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 18:00:27,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:27,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 18:00:27,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:27,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:27,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-07-13 18:00:27,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-07-13 18:00:27,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-13 18:00:27,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:27,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,397 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 11 proven. 9 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-13 18:00:27,397 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:27,397 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [466179188] [2022-07-13 18:00:27,397 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [466179188] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:00:27,397 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1565011055] [2022-07-13 18:00:27,397 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:27,397 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:27,397 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:27,399 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:00:27,434 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-13 18:00:27,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:27,497 INFO L263 TraceCheckSpWp]: Trace formula consists of 483 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-13 18:00:27,502 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:00:27,654 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 16 proven. 12 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 18:00:27,654 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-13 18:00:27,775 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 12 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-07-13 18:00:27,775 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1565011055] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-13 18:00:27,775 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-13 18:00:27,775 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2022-07-13 18:00:27,775 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [727909492] [2022-07-13 18:00:27,775 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-13 18:00:27,776 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-07-13 18:00:27,776 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:27,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-07-13 18:00:27,776 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-07-13 18:00:27,776 INFO L87 Difference]: Start difference. First operand 697 states and 895 transitions. Second operand has 9 states, 9 states have (on average 11.0) internal successors, (99), 6 states have internal predecessors, (99), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-13 18:00:28,360 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:28,361 INFO L93 Difference]: Finished difference Result 1672 states and 2265 transitions. [2022-07-13 18:00:28,361 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-07-13 18:00:28,361 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 11.0) internal successors, (99), 6 states have internal predecessors, (99), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 101 [2022-07-13 18:00:28,362 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:28,366 INFO L225 Difference]: With dead ends: 1672 [2022-07-13 18:00:28,366 INFO L226 Difference]: Without dead ends: 1099 [2022-07-13 18:00:28,368 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 254 GetRequests, 222 SyntacticMatches, 5 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 201 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=227, Invalid=585, Unknown=0, NotChecked=0, Total=812 [2022-07-13 18:00:28,369 INFO L413 NwaCegarLoop]: 148 mSDtfsCounter, 395 mSDsluCounter, 401 mSDsCounter, 0 mSdLazyCounter, 629 mSolverCounterSat, 168 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 403 SdHoareTripleChecker+Valid, 549 SdHoareTripleChecker+Invalid, 797 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 168 IncrementalHoareTripleChecker+Valid, 629 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:28,369 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [403 Valid, 549 Invalid, 797 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [168 Valid, 629 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-07-13 18:00:28,371 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1099 states. [2022-07-13 18:00:28,413 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1099 to 964. [2022-07-13 18:00:28,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 964 states, 726 states have (on average 1.2314049586776858) internal successors, (894), 783 states have internal predecessors, (894), 119 states have call successors, (119), 101 states have call predecessors, (119), 118 states have return successors, (250), 113 states have call predecessors, (250), 119 states have call successors, (250) [2022-07-13 18:00:28,418 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 964 states to 964 states and 1263 transitions. [2022-07-13 18:00:28,419 INFO L78 Accepts]: Start accepts. Automaton has 964 states and 1263 transitions. Word has length 101 [2022-07-13 18:00:28,420 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:28,420 INFO L495 AbstractCegarLoop]: Abstraction has 964 states and 1263 transitions. [2022-07-13 18:00:28,420 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 11.0) internal successors, (99), 6 states have internal predecessors, (99), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-13 18:00:28,420 INFO L276 IsEmpty]: Start isEmpty. Operand 964 states and 1263 transitions. [2022-07-13 18:00:28,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 148 [2022-07-13 18:00:28,426 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:28,427 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:28,623 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-13 18:00:28,643 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-07-13 18:00:28,643 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:28,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:28,644 INFO L85 PathProgramCache]: Analyzing trace with hash -159048421, now seen corresponding path program 2 times [2022-07-13 18:00:28,644 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:28,644 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [408695127] [2022-07-13 18:00:28,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:28,644 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:28,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 18:00:28,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:28,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 18:00:28,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:28,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:28,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-07-13 18:00:28,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-13 18:00:28,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:28,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-13 18:00:28,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:28,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-07-13 18:00:28,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-07-13 18:00:28,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-13 18:00:28,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:28,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:28,851 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 49 proven. 23 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-07-13 18:00:28,852 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:28,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [408695127] [2022-07-13 18:00:28,852 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [408695127] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:00:28,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [203422988] [2022-07-13 18:00:28,852 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-07-13 18:00:28,852 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:28,852 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:28,854 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:00:28,855 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-13 18:00:28,943 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-07-13 18:00:28,943 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-07-13 18:00:28,945 INFO L263 TraceCheckSpWp]: Trace formula consists of 597 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-13 18:00:28,949 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:00:29,003 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 84 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-07-13 18:00:29,003 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 18:00:29,004 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [203422988] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:29,004 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 18:00:29,004 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 12 [2022-07-13 18:00:29,004 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1408911000] [2022-07-13 18:00:29,004 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:29,005 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-07-13 18:00:29,005 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:29,005 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-07-13 18:00:29,005 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2022-07-13 18:00:29,005 INFO L87 Difference]: Start difference. First operand 964 states and 1263 transitions. Second operand has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-13 18:00:29,237 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:29,237 INFO L93 Difference]: Finished difference Result 2581 states and 3531 transitions. [2022-07-13 18:00:29,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-07-13 18:00:29,237 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 147 [2022-07-13 18:00:29,238 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:29,243 INFO L225 Difference]: With dead ends: 2581 [2022-07-13 18:00:29,244 INFO L226 Difference]: Without dead ends: 1739 [2022-07-13 18:00:29,246 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 193 GetRequests, 174 SyntacticMatches, 4 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=57, Invalid=215, Unknown=0, NotChecked=0, Total=272 [2022-07-13 18:00:29,247 INFO L413 NwaCegarLoop]: 204 mSDtfsCounter, 244 mSDsluCounter, 472 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 244 SdHoareTripleChecker+Valid, 676 SdHoareTripleChecker+Invalid, 214 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:29,247 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [244 Valid, 676 Invalid, 214 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-13 18:00:29,248 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1739 states. [2022-07-13 18:00:29,299 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1739 to 1703. [2022-07-13 18:00:29,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1703 states, 1286 states have (on average 1.2301710730948678) internal successors, (1582), 1370 states have internal predecessors, (1582), 202 states have call successors, (202), 180 states have call predecessors, (202), 214 states have return successors, (404), 204 states have call predecessors, (404), 202 states have call successors, (404) [2022-07-13 18:00:29,306 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1703 states to 1703 states and 2188 transitions. [2022-07-13 18:00:29,307 INFO L78 Accepts]: Start accepts. Automaton has 1703 states and 2188 transitions. Word has length 147 [2022-07-13 18:00:29,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:29,307 INFO L495 AbstractCegarLoop]: Abstraction has 1703 states and 2188 transitions. [2022-07-13 18:00:29,307 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-07-13 18:00:29,307 INFO L276 IsEmpty]: Start isEmpty. Operand 1703 states and 2188 transitions. [2022-07-13 18:00:29,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 148 [2022-07-13 18:00:29,310 INFO L187 NwaCegarLoop]: Found error trace [2022-07-13 18:00:29,310 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:29,329 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-13 18:00:29,515 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-07-13 18:00:29,516 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-13 18:00:29,516 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 18:00:29,516 INFO L85 PathProgramCache]: Analyzing trace with hash -1375202147, now seen corresponding path program 1 times [2022-07-13 18:00:29,516 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 18:00:29,516 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1468515378] [2022-07-13 18:00:29,516 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:29,516 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 18:00:29,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-07-13 18:00:29,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-07-13 18:00:29,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-07-13 18:00:29,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:29,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-13 18:00:29,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-07-13 18:00:29,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-13 18:00:29,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-07-13 18:00:29,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-13 18:00:29,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:29,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-07-13 18:00:29,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-07-13 18:00:29,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-07-13 18:00:29,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-13 18:00:29,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,643 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 43 proven. 6 refuted. 0 times theorem prover too weak. 53 trivial. 0 not checked. [2022-07-13 18:00:29,643 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 18:00:29,643 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1468515378] [2022-07-13 18:00:29,643 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1468515378] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-13 18:00:29,643 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [106511773] [2022-07-13 18:00:29,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 18:00:29,644 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:29,644 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 18:00:29,645 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-13 18:00:29,646 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-07-13 18:00:29,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 18:00:29,734 INFO L263 TraceCheckSpWp]: Trace formula consists of 598 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-13 18:00:29,737 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 18:00:29,745 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 70 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-07-13 18:00:29,745 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-13 18:00:29,745 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [106511773] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 18:00:29,745 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-13 18:00:29,745 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 10 [2022-07-13 18:00:29,745 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1992760604] [2022-07-13 18:00:29,746 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 18:00:29,746 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-13 18:00:29,746 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 18:00:29,746 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 18:00:29,746 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2022-07-13 18:00:29,746 INFO L87 Difference]: Start difference. First operand 1703 states and 2188 transitions. Second operand has 5 states, 5 states have (on average 19.6) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-13 18:00:29,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 18:00:29,790 INFO L93 Difference]: Finished difference Result 2351 states and 2994 transitions. [2022-07-13 18:00:29,790 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-13 18:00:29,791 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 19.6) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 147 [2022-07-13 18:00:29,791 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-13 18:00:29,791 INFO L225 Difference]: With dead ends: 2351 [2022-07-13 18:00:29,791 INFO L226 Difference]: Without dead ends: 0 [2022-07-13 18:00:29,795 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 177 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=103, Unknown=0, NotChecked=0, Total=132 [2022-07-13 18:00:29,796 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 9 mSDsluCounter, 325 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 439 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-13 18:00:29,796 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 439 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-13 18:00:29,796 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-07-13 18:00:29,796 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-07-13 18:00:29,797 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 18:00:29,797 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-07-13 18:00:29,797 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 147 [2022-07-13 18:00:29,797 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-13 18:00:29,797 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 18:00:29,797 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 19.6) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-07-13 18:00:29,797 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-07-13 18:00:29,797 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-07-13 18:00:29,799 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-13 18:00:29,835 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-07-13 18:00:30,015 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-13 18:00:30,017 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-07-13 18:00:32,588 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 841 848) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-13 18:00:32,588 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 841 848) no Hoare annotation was computed. [2022-07-13 18:00:32,588 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 841 848) no Hoare annotation was computed. [2022-07-13 18:00:32,588 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 731 737) no Hoare annotation was computed. [2022-07-13 18:00:32,588 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 731 737) the Hoare annotation is: true [2022-07-13 18:00:32,589 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 615 626) the Hoare annotation is: true [2022-07-13 18:00:32,589 INFO L899 garLoopResultBuilder]: For program point L619-1(lines 615 626) no Hoare annotation was computed. [2022-07-13 18:00:32,589 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 615 626) no Hoare annotation was computed. [2022-07-13 18:00:32,589 INFO L895 garLoopResultBuilder]: At program point L865(lines 860 868) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-13 18:00:32,589 INFO L899 garLoopResultBuilder]: For program point L799(lines 799 807) no Hoare annotation was computed. [2022-07-13 18:00:32,589 INFO L899 garLoopResultBuilder]: For program point L795(lines 795 812) no Hoare annotation was computed. [2022-07-13 18:00:32,589 INFO L899 garLoopResultBuilder]: For program point L696(line 696) no Hoare annotation was computed. [2022-07-13 18:00:32,589 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 707 730) no Hoare annotation was computed. [2022-07-13 18:00:32,589 INFO L895 garLoopResultBuilder]: At program point L697(lines 692 699) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-13 18:00:32,590 INFO L895 garLoopResultBuilder]: At program point L664(lines 659 667) the Hoare annotation is: (let ((.cse7 (<= 2 ~waterLevel~0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse2 (= 0 ~systemActive~0))) (let ((.cse1 (and .cse7 .cse6 .cse8 (not .cse2))) (.cse5 (= ~pumpRunning~0 0)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3) (or .cse0 (and .cse5 .cse6) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or (and .cse7 .cse8) (and .cse5 (<= 1 ~waterLevel~0) .cse4) .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= |timeShift_getWaterLevel_#res#1| 1))))) [2022-07-13 18:00:32,590 INFO L899 garLoopResultBuilder]: For program point L718-1(lines 718 724) no Hoare annotation was computed. [2022-07-13 18:00:32,590 INFO L895 garLoopResultBuilder]: At program point L805(line 805) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-13 18:00:32,590 INFO L895 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-13 18:00:32,590 INFO L895 garLoopResultBuilder]: At program point L797(line 797) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-13 18:00:32,590 INFO L899 garLoopResultBuilder]: For program point L797-1(line 797) no Hoare annotation was computed. [2022-07-13 18:00:32,591 INFO L899 garLoopResultBuilder]: For program point L570(lines 570 576) no Hoare annotation was computed. [2022-07-13 18:00:32,591 INFO L899 garLoopResultBuilder]: For program point L566(lines 566 579) no Hoare annotation was computed. [2022-07-13 18:00:32,591 INFO L895 garLoopResultBuilder]: At program point L566-1(lines 558 582) the Hoare annotation is: (let ((.cse8 (<= 2 ~waterLevel~0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse10 (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~4#1|)) (.cse7 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and .cse8 .cse2 .cse9 .cse10 (not .cse7))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse5 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~4#1|)) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2) .cse3 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~4#1| 1) (= |timeShift_getWaterLevel_#res#1| 1))) (or .cse0 (and .cse4 .cse5) .cse6) (or .cse0 .cse3 .cse7 .cse6) (or (and .cse1 (<= 1 ~waterLevel~0) .cse4 .cse5) (and .cse8 .cse9 .cse10) .cse7 .cse6)))) [2022-07-13 18:00:32,591 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 599) no Hoare annotation was computed. [2022-07-13 18:00:32,591 INFO L895 garLoopResultBuilder]: At program point L595-2(lines 591 602) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-07-13 18:00:32,591 INFO L895 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse3)) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 (not (= |old(~waterLevel~0)| 1))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse3 .cse4) (or .cse2 (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse4)))) [2022-07-13 18:00:32,591 INFO L895 garLoopResultBuilder]: At program point L810-1(lines 791 815) the Hoare annotation is: (let ((.cse3 (<= 2 ~waterLevel~0)) (.cse4 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0))) (and (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not .cse4))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) (and .cse0 .cse1 .cse2) (and .cse3 .cse1 .cse2))) (or .cse3 .cse4 (and .cse0 (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-13 18:00:32,591 INFO L899 garLoopResultBuilder]: For program point L711-1(lines 710 729) no Hoare annotation was computed. [2022-07-13 18:00:32,591 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 707 730) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-13 18:00:32,591 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 707 730) no Hoare annotation was computed. [2022-07-13 18:00:32,591 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 696) no Hoare annotation was computed. [2022-07-13 18:00:32,591 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 418 447) no Hoare annotation was computed. [2022-07-13 18:00:32,592 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 418 447) the Hoare annotation is: true [2022-07-13 18:00:32,592 INFO L902 garLoopResultBuilder]: At program point L443(lines 418 447) the Hoare annotation is: true [2022-07-13 18:00:32,592 INFO L899 garLoopResultBuilder]: For program point L439(line 439) no Hoare annotation was computed. [2022-07-13 18:00:32,592 INFO L899 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2022-07-13 18:00:32,592 INFO L902 garLoopResultBuilder]: At program point L432-1(lines 432 436) the Hoare annotation is: true [2022-07-13 18:00:32,592 INFO L899 garLoopResultBuilder]: For program point L429(line 429) no Hoare annotation was computed. [2022-07-13 18:00:32,592 INFO L902 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: true [2022-07-13 18:00:32,592 INFO L902 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: true [2022-07-13 18:00:32,592 INFO L899 garLoopResultBuilder]: For program point L424-1(line 424) no Hoare annotation was computed. [2022-07-13 18:00:32,592 INFO L899 garLoopResultBuilder]: For program point L989(lines 989 995) no Hoare annotation was computed. [2022-07-13 18:00:32,592 INFO L899 garLoopResultBuilder]: For program point L989-1(lines 989 995) no Hoare annotation was computed. [2022-07-13 18:00:32,592 INFO L899 garLoopResultBuilder]: For program point L506(lines 506 513) no Hoare annotation was computed. [2022-07-13 18:00:32,592 INFO L899 garLoopResultBuilder]: For program point L506-2(lines 506 513) no Hoare annotation was computed. [2022-07-13 18:00:32,592 INFO L895 garLoopResultBuilder]: At program point L535(lines 531 537) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 18:00:32,592 INFO L895 garLoopResultBuilder]: At program point L1014(lines 969 1016) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse2 .cse1 (not (= 0 ~systemActive~0))) (and .cse0 .cse2 .cse1))) [2022-07-13 18:00:32,593 INFO L895 garLoopResultBuilder]: At program point L981(line 981) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse2 .cse1 (not (= 0 ~systemActive~0))) (and .cse0 .cse2 .cse1))) [2022-07-13 18:00:32,593 INFO L902 garLoopResultBuilder]: At program point L490(lines 483 492) the Hoare annotation is: true [2022-07-13 18:00:32,593 INFO L902 garLoopResultBuilder]: At program point L515(lines 496 518) the Hoare annotation is: true [2022-07-13 18:00:32,593 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-07-13 18:00:32,593 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-07-13 18:00:32,593 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-07-13 18:00:32,593 INFO L895 garLoopResultBuilder]: At program point L949(line 949) the Hoare annotation is: (and (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-07-13 18:00:32,593 INFO L899 garLoopResultBuilder]: For program point L970(lines 969 1016) no Hoare annotation was computed. [2022-07-13 18:00:32,593 INFO L899 garLoopResultBuilder]: For program point L999(lines 999 1012) no Hoare annotation was computed. [2022-07-13 18:00:32,593 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-07-13 18:00:32,593 INFO L895 garLoopResultBuilder]: At program point L479(lines 475 481) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_main_~tmp~3#1| ~systemActive~0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 18:00:32,593 INFO L895 garLoopResultBuilder]: At program point L991(line 991) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse2 .cse1 (not (= 0 ~systemActive~0))) (and .cse0 .cse2 .cse1))) [2022-07-13 18:00:32,593 INFO L902 garLoopResultBuilder]: At program point L1020(lines 959 1024) the Hoare annotation is: true [2022-07-13 18:00:32,593 INFO L899 garLoopResultBuilder]: For program point L979(lines 979 985) no Hoare annotation was computed. [2022-07-13 18:00:32,593 INFO L899 garLoopResultBuilder]: For program point L979-1(lines 979 985) no Hoare annotation was computed. [2022-07-13 18:00:32,593 INFO L899 garLoopResultBuilder]: For program point L971(lines 971 975) no Hoare annotation was computed. [2022-07-13 18:00:32,594 INFO L895 garLoopResultBuilder]: At program point L550(lines 545 553) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 18:00:32,594 INFO L895 garLoopResultBuilder]: At program point L542(lines 538 544) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-07-13 18:00:32,594 INFO L895 garLoopResultBuilder]: At program point L955(lines 943 957) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse0 (<= 2 ~waterLevel~0) .cse1))) [2022-07-13 18:00:32,594 INFO L895 garLoopResultBuilder]: At program point L1017(lines 968 1018) the Hoare annotation is: false [2022-07-13 18:00:32,594 INFO L899 garLoopResultBuilder]: For program point L947(lines 947 953) no Hoare annotation was computed. [2022-07-13 18:00:32,594 INFO L899 garLoopResultBuilder]: For program point L947-1(lines 947 953) no Hoare annotation was computed. [2022-07-13 18:00:32,594 INFO L899 garLoopResultBuilder]: For program point L1005(lines 1005 1011) no Hoare annotation was computed. [2022-07-13 18:00:32,594 INFO L895 garLoopResultBuilder]: At program point L1005-2(lines 999 1012) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (and .cse2 .cse1 (not (= 0 ~systemActive~0))) (and .cse0 .cse2 .cse1))) [2022-07-13 18:00:32,594 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 739 763) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-13 18:00:32,594 INFO L895 garLoopResultBuilder]: At program point L758(line 758) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-13 18:00:32,594 INFO L899 garLoopResultBuilder]: For program point L758-1(lines 739 763) no Hoare annotation was computed. [2022-07-13 18:00:32,594 INFO L899 garLoopResultBuilder]: For program point L672(lines 672 678) no Hoare annotation was computed. [2022-07-13 18:00:32,594 INFO L899 garLoopResultBuilder]: For program point L831(lines 831 837) no Hoare annotation was computed. [2022-07-13 18:00:32,594 INFO L895 garLoopResultBuilder]: At program point L829(line 829) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-13 18:00:32,594 INFO L895 garLoopResultBuilder]: At program point L831-2(lines 824 840) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2022-07-13 18:00:32,595 INFO L899 garLoopResultBuilder]: For program point L829-1(line 829) no Hoare annotation was computed. [2022-07-13 18:00:32,595 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 739 763) no Hoare annotation was computed. [2022-07-13 18:00:32,595 INFO L895 garLoopResultBuilder]: At program point L920(lines 905 923) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) .cse2) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2))) [2022-07-13 18:00:32,595 INFO L895 garLoopResultBuilder]: At program point L821(lines 816 823) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2022-07-13 18:00:32,595 INFO L899 garLoopResultBuilder]: For program point L914(lines 914 918) no Hoare annotation was computed. [2022-07-13 18:00:32,595 INFO L895 garLoopResultBuilder]: At program point L753(line 753) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 .cse1 .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (not (<= 1 ~waterLevel~0)) (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0))) [2022-07-13 18:00:32,595 INFO L899 garLoopResultBuilder]: For program point L914-2(lines 914 918) no Hoare annotation was computed. [2022-07-13 18:00:32,595 INFO L899 garLoopResultBuilder]: For program point L747(lines 747 755) no Hoare annotation was computed. [2022-07-13 18:00:32,595 INFO L899 garLoopResultBuilder]: For program point L743(lines 743 760) no Hoare annotation was computed. [2022-07-13 18:00:32,595 INFO L895 garLoopResultBuilder]: At program point L677(lines 668 681) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse4 (<= 2 ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (and (or .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (not (<= 1 ~waterLevel~0)) .cse2 .cse3) (or .cse0 (not .cse4) .cse2 .cse3)))) [2022-07-13 18:00:32,595 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 603 614) no Hoare annotation was computed. [2022-07-13 18:00:32,595 INFO L899 garLoopResultBuilder]: For program point L607-1(lines 603 614) no Hoare annotation was computed. [2022-07-13 18:00:32,595 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 603 614) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or .cse0 (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-07-13 18:00:32,595 INFO L895 garLoopResultBuilder]: At program point L779(line 779) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-13 18:00:32,595 INFO L895 garLoopResultBuilder]: At program point L775(line 775) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~6#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~10#1| 0))))) [2022-07-13 18:00:32,596 INFO L899 garLoopResultBuilder]: For program point L773(lines 773 781) no Hoare annotation was computed. [2022-07-13 18:00:32,596 INFO L899 garLoopResultBuilder]: For program point L769(lines 769 786) no Hoare annotation was computed. [2022-07-13 18:00:32,596 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 765 789) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-07-13 18:00:32,596 INFO L895 garLoopResultBuilder]: At program point L784(line 784) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0)) (= 0 ~systemActive~0)) [2022-07-13 18:00:32,596 INFO L895 garLoopResultBuilder]: At program point L687(lines 682 690) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-13 18:00:32,596 INFO L899 garLoopResultBuilder]: For program point L784-1(lines 765 789) no Hoare annotation was computed. [2022-07-13 18:00:32,596 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 765 789) no Hoare annotation was computed. [2022-07-13 18:00:32,596 INFO L895 garLoopResultBuilder]: At program point L939(lines 924 942) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~10#1| 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-07-13 18:00:32,596 INFO L899 garLoopResultBuilder]: For program point L933(lines 933 937) no Hoare annotation was computed. [2022-07-13 18:00:32,596 INFO L899 garLoopResultBuilder]: For program point L933-2(lines 933 937) no Hoare annotation was computed. [2022-07-13 18:00:32,596 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 849 859) the Hoare annotation is: true [2022-07-13 18:00:32,596 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 849 859) no Hoare annotation was computed. [2022-07-13 18:00:32,596 INFO L902 garLoopResultBuilder]: At program point L632(lines 627 635) the Hoare annotation is: true [2022-07-13 18:00:32,596 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 849 859) no Hoare annotation was computed. [2022-07-13 18:00:32,599 INFO L356 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 18:00:32,600 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-13 18:00:32,618 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.07 06:00:32 BoogieIcfgContainer [2022-07-13 18:00:32,624 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-13 18:00:32,624 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-13 18:00:32,624 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-13 18:00:32,625 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-13 18:00:32,625 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 06:00:22" (3/4) ... [2022-07-13 18:00:32,627 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-07-13 18:00:32,631 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-07-13 18:00:32,631 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-07-13 18:00:32,631 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-07-13 18:00:32,631 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-07-13 18:00:32,631 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-07-13 18:00:32,631 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-07-13 18:00:32,631 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-07-13 18:00:32,631 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-07-13 18:00:32,631 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-07-13 18:00:32,643 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 55 nodes and edges [2022-07-13 18:00:32,643 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-07-13 18:00:32,644 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-07-13 18:00:32,644 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-07-13 18:00:32,645 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-07-13 18:00:32,645 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 18:00:32,645 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-07-13 18:00:32,664 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-13 18:00:32,664 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-07-13 18:00:32,665 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-13 18:00:32,665 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && !(0 == systemActive))) && (((2 <= waterLevel || 0 == systemActive) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-07-13 18:00:32,666 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || 1 <= \result) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || !(1 <= \old(waterLevel)))) && ((((2 <= waterLevel && 2 <= \result) || ((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1) [2022-07-13 18:00:32,667 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1))) && ((!(\old(pumpRunning) == 0) || (1 <= \result && 1 <= tmp)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp) || ((2 <= waterLevel && 2 <= \result) && 2 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-07-13 18:00:32,667 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-07-13 18:00:32,667 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) [2022-07-13 18:00:32,667 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive [2022-07-13 18:00:32,667 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= waterLevel)) || 0 == systemActive) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && \result == 0)) && (((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || 0 == systemActive) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && \result == 0)) [2022-07-13 18:00:32,667 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive [2022-07-13 18:00:32,668 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0) || !(1 <= waterLevel)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-07-13 18:00:32,670 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) [2022-07-13 18:00:32,670 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && tmp___0 == 0) && tmp == 1) && \result == 0) && \result == 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) [2022-07-13 18:00:32,701 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-07-13 18:00:32,701 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-13 18:00:32,701 INFO L158 Benchmark]: Toolchain (without parser) took 11546.66ms. Allocated memory was 104.9MB in the beginning and 201.3MB in the end (delta: 96.5MB). Free memory was 75.0MB in the beginning and 137.8MB in the end (delta: -62.8MB). Peak memory consumption was 32.9MB. Max. memory is 16.1GB. [2022-07-13 18:00:32,701 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 104.9MB. Free memory is still 61.0MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 18:00:32,701 INFO L158 Benchmark]: CACSL2BoogieTranslator took 669.63ms. Allocated memory is still 104.9MB. Free memory was 74.8MB in the beginning and 69.3MB in the end (delta: 5.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-07-13 18:00:32,702 INFO L158 Benchmark]: Boogie Procedure Inliner took 82.54ms. Allocated memory is still 104.9MB. Free memory was 69.3MB in the beginning and 66.6MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 18:00:32,702 INFO L158 Benchmark]: Boogie Preprocessor took 58.72ms. Allocated memory is still 104.9MB. Free memory was 66.6MB in the beginning and 64.8MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-13 18:00:32,702 INFO L158 Benchmark]: RCFGBuilder took 646.19ms. Allocated memory was 104.9MB in the beginning and 138.4MB in the end (delta: 33.6MB). Free memory was 64.8MB in the beginning and 109.2MB in the end (delta: -44.4MB). Peak memory consumption was 19.9MB. Max. memory is 16.1GB. [2022-07-13 18:00:32,703 INFO L158 Benchmark]: TraceAbstraction took 9994.79ms. Allocated memory was 138.4MB in the beginning and 201.3MB in the end (delta: 62.9MB). Free memory was 108.4MB in the beginning and 144.0MB in the end (delta: -35.6MB). Peak memory consumption was 100.7MB. Max. memory is 16.1GB. [2022-07-13 18:00:32,703 INFO L158 Benchmark]: Witness Printer took 76.31ms. Allocated memory is still 201.3MB. Free memory was 143.0MB in the beginning and 137.8MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-07-13 18:00:32,706 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 104.9MB. Free memory is still 61.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 669.63ms. Allocated memory is still 104.9MB. Free memory was 74.8MB in the beginning and 69.3MB in the end (delta: 5.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 82.54ms. Allocated memory is still 104.9MB. Free memory was 69.3MB in the beginning and 66.6MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 58.72ms. Allocated memory is still 104.9MB. Free memory was 66.6MB in the beginning and 64.8MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 646.19ms. Allocated memory was 104.9MB in the beginning and 138.4MB in the end (delta: 33.6MB). Free memory was 64.8MB in the beginning and 109.2MB in the end (delta: -44.4MB). Peak memory consumption was 19.9MB. Max. memory is 16.1GB. * TraceAbstraction took 9994.79ms. Allocated memory was 138.4MB in the beginning and 201.3MB in the end (delta: 62.9MB). Free memory was 108.4MB in the beginning and 144.0MB in the end (delta: -35.6MB). Peak memory consumption was 100.7MB. Max. memory is 16.1GB. * Witness Printer took 76.31ms. Allocated memory is still 201.3MB. Free memory was 143.0MB in the beginning and 137.8MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 696]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 107 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.9s, OverallIterations: 13, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 3.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2049 SdHoareTripleChecker+Valid, 2.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2024 mSDsluCounter, 4932 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3236 mSDsCounter, 600 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2496 IncrementalHoareTripleChecker+Invalid, 3096 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 600 mSolverCounterUnsat, 1696 mSDtfsCounter, 2496 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 759 GetRequests, 629 SyntacticMatches, 11 SemanticMatches, 119 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 328 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1703occurred in iteration=12, InterpolantAutomatonStates: 115, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 13 MinimizatonAttempts, 478 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 50 LocationsWithAnnotation, 3415 PreInvPairs, 3678 NumberOfFragments, 1112 HoareAnnotationTreeSize, 3415 FomulaSimplifications, 3502 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 50 FomulaSimplificationsInter, 16212 FormulaSimplificationTreeSizeReductionInter, 2.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 1163 NumberOfCodeBlocks, 1163 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1247 ConstructedInterpolants, 0 QuantifiedInterpolants, 2161 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1678 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 17 InterpolantComputations, 12 PerfectInterpolantSequences, 434/492 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 558]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp) && !(0 == systemActive))) || !(1 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1))) && ((!(\old(pumpRunning) == 0) || (1 <= \result && 1 <= tmp)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp) || ((2 <= waterLevel && 2 <= \result) && 2 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 943]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && waterLevel == 1) || ((pumpRunning == 0 && 2 <= waterLevel) && splverifierCounter == 0) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && tmp___0 == 0) && tmp == 1) && \result == 0) && \result == 1)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 816]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0) || !(1 <= waterLevel)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 791]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && !(0 == systemActive))) && (((2 <= waterLevel || 0 == systemActive) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 682]: Loop Invariant Derived loop invariant: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 591]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 627]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 959]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 824]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive - InvariantResult [Line: 659]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || 1 <= \result) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || !(1 <= \old(waterLevel)))) && ((((2 <= waterLevel && 2 <= \result) || ((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1) - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= waterLevel)) || 0 == systemActive) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && \result == 0)) && (((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || 0 == systemActive) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && \result == 0)) - InvariantResult [Line: 969]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && splverifierCounter == 0) && waterLevel == 1) || ((2 <= waterLevel && splverifierCounter == 0) && !(0 == systemActive))) || ((pumpRunning == 0 && 2 <= waterLevel) && splverifierCounter == 0) - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 545]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-07-13 18:00:32,757 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE