./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product38.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product38.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ca9ad45e9cd0fa7cfc478092837003ff1c91f26680d4fb1c37c440560090c9e6 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 00:59:05,292 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 00:59:05,295 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 00:59:05,350 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 00:59:05,354 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 00:59:05,358 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 00:59:05,360 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 00:59:05,365 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 00:59:05,367 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 00:59:05,371 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 00:59:05,372 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 00:59:05,374 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 00:59:05,374 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 00:59:05,377 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 00:59:05,379 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 00:59:05,381 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 00:59:05,382 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 00:59:05,386 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 00:59:05,390 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 00:59:05,396 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 00:59:05,397 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 00:59:05,398 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 00:59:05,400 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 00:59:05,401 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 00:59:05,406 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 00:59:05,407 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 00:59:05,407 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 00:59:05,409 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 00:59:05,409 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 00:59:05,410 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 00:59:05,410 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 00:59:05,411 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 00:59:05,413 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 00:59:05,414 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 00:59:05,416 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 00:59:05,416 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 00:59:05,417 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 00:59:05,417 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 00:59:05,417 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 00:59:05,418 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 00:59:05,418 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 00:59:05,419 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 00:59:05,451 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 00:59:05,452 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 00:59:05,452 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 00:59:05,453 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 00:59:05,454 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 00:59:05,454 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 00:59:05,454 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 00:59:05,455 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 00:59:05,455 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 00:59:05,455 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 00:59:05,456 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 00:59:05,456 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 00:59:05,456 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 00:59:05,457 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 00:59:05,457 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 00:59:05,457 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 00:59:05,457 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 00:59:05,457 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 00:59:05,458 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 00:59:05,458 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 00:59:05,458 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 00:59:05,458 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 00:59:05,458 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 00:59:05,459 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 00:59:05,459 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:59:05,459 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 00:59:05,459 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 00:59:05,460 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 00:59:05,460 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 00:59:05,460 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 00:59:05,460 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 00:59:05,460 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 00:59:05,461 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 00:59:05,461 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 00:59:05,461 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ca9ad45e9cd0fa7cfc478092837003ff1c91f26680d4fb1c37c440560090c9e6 [2021-12-16 00:59:05,675 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 00:59:05,707 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 00:59:05,711 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 00:59:05,713 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 00:59:05,714 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 00:59:05,715 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product38.cil.c [2021-12-16 00:59:05,779 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fd1baf205/59d5b0b1e859462795fd66073700b20e/FLAG4cee7cbe1 [2021-12-16 00:59:06,192 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 00:59:06,193 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product38.cil.c [2021-12-16 00:59:06,205 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fd1baf205/59d5b0b1e859462795fd66073700b20e/FLAG4cee7cbe1 [2021-12-16 00:59:06,572 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fd1baf205/59d5b0b1e859462795fd66073700b20e [2021-12-16 00:59:06,574 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 00:59:06,575 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 00:59:06,580 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 00:59:06,580 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 00:59:06,584 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 00:59:06,584 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:59:06" (1/1) ... [2021-12-16 00:59:06,585 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@51222b1d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:06, skipping insertion in model container [2021-12-16 00:59:06,586 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:59:06" (1/1) ... [2021-12-16 00:59:06,591 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 00:59:06,627 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 00:59:06,762 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product38.cil.c[1605,1618] [2021-12-16 00:59:06,869 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:59:06,878 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 00:59:06,892 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product38.cil.c[1605,1618] [2021-12-16 00:59:06,937 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:59:06,952 INFO L208 MainTranslator]: Completed translation [2021-12-16 00:59:06,952 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:06 WrapperNode [2021-12-16 00:59:06,952 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 00:59:06,954 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 00:59:06,954 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 00:59:06,954 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 00:59:06,960 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:06" (1/1) ... [2021-12-16 00:59:06,980 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:06" (1/1) ... [2021-12-16 00:59:07,003 INFO L137 Inliner]: procedures = 55, calls = 155, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 250 [2021-12-16 00:59:07,003 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 00:59:07,004 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 00:59:07,004 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 00:59:07,004 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 00:59:07,013 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:06" (1/1) ... [2021-12-16 00:59:07,014 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:06" (1/1) ... [2021-12-16 00:59:07,017 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:06" (1/1) ... [2021-12-16 00:59:07,030 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:06" (1/1) ... [2021-12-16 00:59:07,036 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:06" (1/1) ... [2021-12-16 00:59:07,041 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:06" (1/1) ... [2021-12-16 00:59:07,042 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:06" (1/1) ... [2021-12-16 00:59:07,045 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 00:59:07,046 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 00:59:07,046 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 00:59:07,046 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 00:59:07,047 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:06" (1/1) ... [2021-12-16 00:59:07,057 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:59:07,067 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:07,077 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 00:59:07,079 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 00:59:07,108 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 00:59:07,108 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 00:59:07,108 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 00:59:07,109 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 00:59:07,109 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 00:59:07,109 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 00:59:07,109 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 00:59:07,109 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-16 00:59:07,109 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-16 00:59:07,109 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:59:07,110 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:59:07,110 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 00:59:07,110 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 00:59:07,110 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 00:59:07,110 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 00:59:07,110 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 00:59:07,110 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 00:59:07,111 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 00:59:07,171 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 00:59:07,173 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 00:59:07,474 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 00:59:07,484 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 00:59:07,484 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 00:59:07,487 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:07 BoogieIcfgContainer [2021-12-16 00:59:07,488 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 00:59:07,490 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 00:59:07,490 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 00:59:07,494 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 00:59:07,494 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 12:59:06" (1/3) ... [2021-12-16 00:59:07,495 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@52ab97d1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:59:07, skipping insertion in model container [2021-12-16 00:59:07,495 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:06" (2/3) ... [2021-12-16 00:59:07,496 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@52ab97d1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:59:07, skipping insertion in model container [2021-12-16 00:59:07,496 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:07" (3/3) ... [2021-12-16 00:59:07,497 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product38.cil.c [2021-12-16 00:59:07,502 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 00:59:07,503 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 00:59:07,553 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 00:59:07,563 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 00:59:07,564 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 00:59:07,604 INFO L276 IsEmpty]: Start isEmpty. Operand has 88 states, 67 states have (on average 1.3880597014925373) internal successors, (93), 75 states have internal predecessors, (93), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2021-12-16 00:59:07,612 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-16 00:59:07,613 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:07,613 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:07,614 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:07,623 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:07,623 INFO L85 PathProgramCache]: Analyzing trace with hash 1803312447, now seen corresponding path program 1 times [2021-12-16 00:59:07,631 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:07,631 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [632069692] [2021-12-16 00:59:07,632 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:07,633 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:07,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:07,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 00:59:07,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:07,884 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:07,886 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:07,886 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [632069692] [2021-12-16 00:59:07,887 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [632069692] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:07,887 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:07,888 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 00:59:07,890 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [778777675] [2021-12-16 00:59:07,890 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:07,895 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 00:59:07,896 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:07,925 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 00:59:07,926 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:59:07,929 INFO L87 Difference]: Start difference. First operand has 88 states, 67 states have (on average 1.3880597014925373) internal successors, (93), 75 states have internal predecessors, (93), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:07,972 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:07,972 INFO L93 Difference]: Finished difference Result 167 states and 228 transitions. [2021-12-16 00:59:07,973 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 00:59:07,974 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-16 00:59:07,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:07,988 INFO L225 Difference]: With dead ends: 167 [2021-12-16 00:59:07,988 INFO L226 Difference]: Without dead ends: 79 [2021-12-16 00:59:07,994 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:59:07,998 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:07,999 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:08,012 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2021-12-16 00:59:08,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 79. [2021-12-16 00:59:08,040 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 67 states have internal predecessors, (79), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-16 00:59:08,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 102 transitions. [2021-12-16 00:59:08,044 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 102 transitions. Word has length 25 [2021-12-16 00:59:08,045 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:08,045 INFO L470 AbstractCegarLoop]: Abstraction has 79 states and 102 transitions. [2021-12-16 00:59:08,045 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:08,046 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 102 transitions. [2021-12-16 00:59:08,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-16 00:59:08,050 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:08,050 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:08,051 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 00:59:08,051 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:08,054 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:08,054 INFO L85 PathProgramCache]: Analyzing trace with hash 220336758, now seen corresponding path program 1 times [2021-12-16 00:59:08,055 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:08,055 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [238957606] [2021-12-16 00:59:08,055 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:08,056 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:08,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-16 00:59:08,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,142 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:08,142 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:08,143 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [238957606] [2021-12-16 00:59:08,143 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [238957606] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:08,143 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:08,144 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:59:08,144 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2027617638] [2021-12-16 00:59:08,144 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:08,145 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:59:08,146 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:08,146 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:59:08,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:08,147 INFO L87 Difference]: Start difference. First operand 79 states and 102 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:08,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:08,165 INFO L93 Difference]: Finished difference Result 122 states and 158 transitions. [2021-12-16 00:59:08,168 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:59:08,168 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-16 00:59:08,169 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:08,171 INFO L225 Difference]: With dead ends: 122 [2021-12-16 00:59:08,171 INFO L226 Difference]: Without dead ends: 70 [2021-12-16 00:59:08,177 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:08,179 INFO L933 BasicCegarLoop]: 89 mSDtfsCounter, 13 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:08,179 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 161 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:08,181 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2021-12-16 00:59:08,211 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2021-12-16 00:59:08,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 54 states have (on average 1.3333333333333333) internal successors, (72), 61 states have internal predecessors, (72), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-16 00:59:08,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 90 transitions. [2021-12-16 00:59:08,213 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 90 transitions. Word has length 26 [2021-12-16 00:59:08,213 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:08,213 INFO L470 AbstractCegarLoop]: Abstraction has 70 states and 90 transitions. [2021-12-16 00:59:08,213 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:08,214 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 90 transitions. [2021-12-16 00:59:08,215 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-12-16 00:59:08,215 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:08,215 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:08,215 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 00:59:08,215 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:08,216 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:08,216 INFO L85 PathProgramCache]: Analyzing trace with hash 753977737, now seen corresponding path program 1 times [2021-12-16 00:59:08,216 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:08,216 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1678332188] [2021-12-16 00:59:08,217 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:08,217 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:08,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:08,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,287 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:08,287 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:08,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1678332188] [2021-12-16 00:59:08,288 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1678332188] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:08,288 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:08,288 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 00:59:08,288 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1984510539] [2021-12-16 00:59:08,289 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:08,289 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 00:59:08,289 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:08,290 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 00:59:08,290 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 00:59:08,290 INFO L87 Difference]: Start difference. First operand 70 states and 90 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:08,364 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:08,368 INFO L93 Difference]: Finished difference Result 132 states and 173 transitions. [2021-12-16 00:59:08,369 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 00:59:08,369 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-12-16 00:59:08,369 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:08,370 INFO L225 Difference]: With dead ends: 132 [2021-12-16 00:59:08,371 INFO L226 Difference]: Without dead ends: 70 [2021-12-16 00:59:08,372 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:08,374 INFO L933 BasicCegarLoop]: 83 mSDtfsCounter, 117 mSDsluCounter, 132 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 215 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:08,376 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [117 Valid, 215 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:08,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2021-12-16 00:59:08,384 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2021-12-16 00:59:08,384 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 54 states have (on average 1.3148148148148149) internal successors, (71), 61 states have internal predecessors, (71), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-16 00:59:08,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 89 transitions. [2021-12-16 00:59:08,385 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 89 transitions. Word has length 31 [2021-12-16 00:59:08,385 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:08,385 INFO L470 AbstractCegarLoop]: Abstraction has 70 states and 89 transitions. [2021-12-16 00:59:08,386 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:08,386 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 89 transitions. [2021-12-16 00:59:08,387 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-16 00:59:08,387 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:08,387 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:08,388 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 00:59:08,388 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:08,388 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:08,388 INFO L85 PathProgramCache]: Analyzing trace with hash -1236058631, now seen corresponding path program 1 times [2021-12-16 00:59:08,389 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:08,389 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1327699087] [2021-12-16 00:59:08,389 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:08,389 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:08,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:08,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:08,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-16 00:59:08,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,475 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:08,475 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:08,475 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1327699087] [2021-12-16 00:59:08,476 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1327699087] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:08,476 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:08,476 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 00:59:08,476 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [313222239] [2021-12-16 00:59:08,477 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:08,478 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 00:59:08,478 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:08,479 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 00:59:08,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 00:59:08,479 INFO L87 Difference]: Start difference. First operand 70 states and 89 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-16 00:59:08,658 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:08,658 INFO L93 Difference]: Finished difference Result 207 states and 265 transitions. [2021-12-16 00:59:08,659 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:59:08,659 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2021-12-16 00:59:08,659 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:08,660 INFO L225 Difference]: With dead ends: 207 [2021-12-16 00:59:08,660 INFO L226 Difference]: Without dead ends: 145 [2021-12-16 00:59:08,661 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-16 00:59:08,662 INFO L933 BasicCegarLoop]: 130 mSDtfsCounter, 161 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 95 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 163 SdHoareTripleChecker+Valid, 302 SdHoareTripleChecker+Invalid, 140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 95 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:08,662 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [163 Valid, 302 Invalid, 140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 95 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:08,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 145 states. [2021-12-16 00:59:08,674 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 145 to 139. [2021-12-16 00:59:08,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 139 states, 107 states have (on average 1.280373831775701) internal successors, (137), 114 states have internal predecessors, (137), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2021-12-16 00:59:08,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 172 transitions. [2021-12-16 00:59:08,678 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 172 transitions. Word has length 41 [2021-12-16 00:59:08,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:08,678 INFO L470 AbstractCegarLoop]: Abstraction has 139 states and 172 transitions. [2021-12-16 00:59:08,678 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-16 00:59:08,678 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 172 transitions. [2021-12-16 00:59:08,679 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-12-16 00:59:08,679 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:08,680 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:08,680 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 00:59:08,680 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:08,680 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:08,681 INFO L85 PathProgramCache]: Analyzing trace with hash -649911993, now seen corresponding path program 1 times [2021-12-16 00:59:08,681 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:08,681 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [936676426] [2021-12-16 00:59:08,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:08,681 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:08,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:08,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-16 00:59:08,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,756 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:08,756 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:08,757 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [936676426] [2021-12-16 00:59:08,757 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [936676426] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:08,757 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:08,757 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:08,757 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1206356084] [2021-12-16 00:59:08,758 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:08,758 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:08,758 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:08,759 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:08,759 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:08,759 INFO L87 Difference]: Start difference. First operand 139 states and 172 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 00:59:08,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:08,887 INFO L93 Difference]: Finished difference Result 278 states and 348 transitions. [2021-12-16 00:59:08,888 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:59:08,888 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2021-12-16 00:59:08,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:08,889 INFO L225 Difference]: With dead ends: 278 [2021-12-16 00:59:08,889 INFO L226 Difference]: Without dead ends: 147 [2021-12-16 00:59:08,890 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-16 00:59:08,891 INFO L933 BasicCegarLoop]: 92 mSDtfsCounter, 58 mSDsluCounter, 282 mSDsCounter, 0 mSdLazyCounter, 103 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 61 SdHoareTripleChecker+Valid, 374 SdHoareTripleChecker+Invalid, 121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 103 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:08,892 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [61 Valid, 374 Invalid, 121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:08,892 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 147 states. [2021-12-16 00:59:08,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 147 to 142. [2021-12-16 00:59:08,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 110 states have (on average 1.2727272727272727) internal successors, (140), 117 states have internal predecessors, (140), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2021-12-16 00:59:08,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 175 transitions. [2021-12-16 00:59:08,904 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 175 transitions. Word has length 45 [2021-12-16 00:59:08,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:08,905 INFO L470 AbstractCegarLoop]: Abstraction has 142 states and 175 transitions. [2021-12-16 00:59:08,905 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 00:59:08,905 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 175 transitions. [2021-12-16 00:59:08,906 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-12-16 00:59:08,906 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:08,906 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:08,907 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 00:59:08,907 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:08,907 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:08,907 INFO L85 PathProgramCache]: Analyzing trace with hash 1956111561, now seen corresponding path program 1 times [2021-12-16 00:59:08,908 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:08,908 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1939582437] [2021-12-16 00:59:08,908 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:08,908 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:08,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:08,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-16 00:59:08,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:08,987 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:08,988 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:08,988 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1939582437] [2021-12-16 00:59:08,988 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1939582437] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:08,988 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:08,988 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:59:08,988 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [486736339] [2021-12-16 00:59:08,988 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:08,989 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:08,989 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:08,989 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:08,990 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:08,990 INFO L87 Difference]: Start difference. First operand 142 states and 175 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 00:59:09,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:09,122 INFO L93 Difference]: Finished difference Result 286 states and 359 transitions. [2021-12-16 00:59:09,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:59:09,123 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2021-12-16 00:59:09,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:09,124 INFO L225 Difference]: With dead ends: 286 [2021-12-16 00:59:09,124 INFO L226 Difference]: Without dead ends: 152 [2021-12-16 00:59:09,125 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2021-12-16 00:59:09,126 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 96 mSDsluCounter, 317 mSDsCounter, 0 mSdLazyCounter, 138 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 408 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 138 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:09,126 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [100 Valid, 408 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 138 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:09,127 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2021-12-16 00:59:09,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 144. [2021-12-16 00:59:09,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 112 states have (on average 1.2678571428571428) internal successors, (142), 119 states have internal predecessors, (142), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2021-12-16 00:59:09,137 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 177 transitions. [2021-12-16 00:59:09,137 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 177 transitions. Word has length 45 [2021-12-16 00:59:09,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:09,138 INFO L470 AbstractCegarLoop]: Abstraction has 144 states and 177 transitions. [2021-12-16 00:59:09,138 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 00:59:09,138 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 177 transitions. [2021-12-16 00:59:09,139 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2021-12-16 00:59:09,139 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:09,139 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:09,139 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-16 00:59:09,140 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:09,140 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:09,140 INFO L85 PathProgramCache]: Analyzing trace with hash -1916153909, now seen corresponding path program 1 times [2021-12-16 00:59:09,140 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:09,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1101232327] [2021-12-16 00:59:09,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:09,141 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:09,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:09,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:09,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:09,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2021-12-16 00:59:09,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:09,184 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:09,184 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:09,184 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1101232327] [2021-12-16 00:59:09,184 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1101232327] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:09,185 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:09,185 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 00:59:09,185 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2020869142] [2021-12-16 00:59:09,185 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:09,185 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 00:59:09,186 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:09,186 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 00:59:09,186 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 00:59:09,186 INFO L87 Difference]: Start difference. First operand 144 states and 177 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 00:59:09,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:09,369 INFO L93 Difference]: Finished difference Result 405 states and 519 transitions. [2021-12-16 00:59:09,370 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:59:09,370 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2021-12-16 00:59:09,370 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:09,372 INFO L225 Difference]: With dead ends: 405 [2021-12-16 00:59:09,373 INFO L226 Difference]: Without dead ends: 269 [2021-12-16 00:59:09,373 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:09,374 INFO L933 BasicCegarLoop]: 143 mSDtfsCounter, 196 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 131 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 203 SdHoareTripleChecker+Valid, 314 SdHoareTripleChecker+Invalid, 184 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 131 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:09,374 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [203 Valid, 314 Invalid, 184 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:09,375 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 269 states. [2021-12-16 00:59:09,389 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 269 to 261. [2021-12-16 00:59:09,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 261 states, 201 states have (on average 1.2587064676616915) internal successors, (253), 212 states have internal predecessors, (253), 30 states have call successors, (30), 28 states have call predecessors, (30), 29 states have return successors, (45), 30 states have call predecessors, (45), 30 states have call successors, (45) [2021-12-16 00:59:09,391 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 261 states to 261 states and 328 transitions. [2021-12-16 00:59:09,391 INFO L78 Accepts]: Start accepts. Automaton has 261 states and 328 transitions. Word has length 45 [2021-12-16 00:59:09,391 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:09,392 INFO L470 AbstractCegarLoop]: Abstraction has 261 states and 328 transitions. [2021-12-16 00:59:09,392 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-16 00:59:09,392 INFO L276 IsEmpty]: Start isEmpty. Operand 261 states and 328 transitions. [2021-12-16 00:59:09,393 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-16 00:59:09,393 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:09,393 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:09,393 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-16 00:59:09,393 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:09,393 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:09,394 INFO L85 PathProgramCache]: Analyzing trace with hash -1607715167, now seen corresponding path program 1 times [2021-12-16 00:59:09,394 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:09,394 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1121517252] [2021-12-16 00:59:09,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:09,394 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:09,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:09,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:09,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:09,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:09,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:09,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2021-12-16 00:59:09,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:09,467 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:09,467 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:09,468 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1121517252] [2021-12-16 00:59:09,468 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1121517252] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:09,468 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:09,468 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:59:09,468 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1743054184] [2021-12-16 00:59:09,468 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:09,468 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:09,469 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:09,469 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:09,469 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:09,469 INFO L87 Difference]: Start difference. First operand 261 states and 328 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 00:59:09,682 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:09,682 INFO L93 Difference]: Finished difference Result 767 states and 990 transitions. [2021-12-16 00:59:09,683 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-16 00:59:09,684 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2021-12-16 00:59:09,684 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:09,690 INFO L225 Difference]: With dead ends: 767 [2021-12-16 00:59:09,690 INFO L226 Difference]: Without dead ends: 514 [2021-12-16 00:59:09,691 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-16 00:59:09,692 INFO L933 BasicCegarLoop]: 78 mSDtfsCounter, 137 mSDsluCounter, 285 mSDsCounter, 0 mSdLazyCounter, 168 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 215 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 168 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:09,692 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [145 Valid, 363 Invalid, 215 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 168 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:09,694 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 514 states. [2021-12-16 00:59:09,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 514 to 494. [2021-12-16 00:59:09,730 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 494 states, 375 states have (on average 1.216) internal successors, (456), 396 states have internal predecessors, (456), 60 states have call successors, (60), 56 states have call predecessors, (60), 58 states have return successors, (95), 60 states have call predecessors, (95), 60 states have call successors, (95) [2021-12-16 00:59:09,733 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 494 states to 494 states and 611 transitions. [2021-12-16 00:59:09,734 INFO L78 Accepts]: Start accepts. Automaton has 494 states and 611 transitions. Word has length 47 [2021-12-16 00:59:09,734 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:09,735 INFO L470 AbstractCegarLoop]: Abstraction has 494 states and 611 transitions. [2021-12-16 00:59:09,735 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 00:59:09,736 INFO L276 IsEmpty]: Start isEmpty. Operand 494 states and 611 transitions. [2021-12-16 00:59:09,737 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-16 00:59:09,738 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:09,738 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:09,738 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-16 00:59:09,738 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:09,739 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:09,739 INFO L85 PathProgramCache]: Analyzing trace with hash -236687547, now seen corresponding path program 1 times [2021-12-16 00:59:09,739 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:09,739 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [651754787] [2021-12-16 00:59:09,739 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:09,739 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:09,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:09,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:09,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:09,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:09,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:09,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:09,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:09,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-16 00:59:09,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:09,818 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:09,818 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:09,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [651754787] [2021-12-16 00:59:09,819 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [651754787] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:09,819 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:09,828 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:59:09,828 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1638358634] [2021-12-16 00:59:09,829 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:09,829 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:09,829 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:09,830 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:09,830 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:09,830 INFO L87 Difference]: Start difference. First operand 494 states and 611 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-16 00:59:10,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:10,132 INFO L93 Difference]: Finished difference Result 996 states and 1243 transitions. [2021-12-16 00:59:10,132 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-16 00:59:10,132 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 51 [2021-12-16 00:59:10,133 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:10,136 INFO L225 Difference]: With dead ends: 996 [2021-12-16 00:59:10,136 INFO L226 Difference]: Without dead ends: 510 [2021-12-16 00:59:10,138 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2021-12-16 00:59:10,138 INFO L933 BasicCegarLoop]: 83 mSDtfsCounter, 169 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 296 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 351 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 296 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:10,139 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [171 Valid, 224 Invalid, 351 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 296 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:10,139 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 510 states. [2021-12-16 00:59:10,164 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 510 to 490. [2021-12-16 00:59:10,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 490 states, 371 states have (on average 1.196765498652291) internal successors, (444), 392 states have internal predecessors, (444), 60 states have call successors, (60), 56 states have call predecessors, (60), 58 states have return successors, (95), 60 states have call predecessors, (95), 60 states have call successors, (95) [2021-12-16 00:59:10,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 490 states to 490 states and 599 transitions. [2021-12-16 00:59:10,168 INFO L78 Accepts]: Start accepts. Automaton has 490 states and 599 transitions. Word has length 51 [2021-12-16 00:59:10,168 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:10,168 INFO L470 AbstractCegarLoop]: Abstraction has 490 states and 599 transitions. [2021-12-16 00:59:10,168 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-16 00:59:10,168 INFO L276 IsEmpty]: Start isEmpty. Operand 490 states and 599 transitions. [2021-12-16 00:59:10,169 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-12-16 00:59:10,169 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:10,169 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:10,170 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-16 00:59:10,170 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:10,170 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:10,170 INFO L85 PathProgramCache]: Analyzing trace with hash 2077216661, now seen corresponding path program 1 times [2021-12-16 00:59:10,170 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:10,170 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1847083691] [2021-12-16 00:59:10,170 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:10,171 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:10,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:10,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 00:59:10,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-16 00:59:10,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2021-12-16 00:59:10,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,221 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:10,222 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:10,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1847083691] [2021-12-16 00:59:10,222 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1847083691] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:10,222 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:10,222 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:10,222 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1238958597] [2021-12-16 00:59:10,222 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:10,222 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:10,223 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:10,223 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:10,223 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:10,223 INFO L87 Difference]: Start difference. First operand 490 states and 599 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 3 states have internal predecessors, (44), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-16 00:59:10,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:10,575 INFO L93 Difference]: Finished difference Result 861 states and 1071 transitions. [2021-12-16 00:59:10,575 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-16 00:59:10,575 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 3 states have internal predecessors, (44), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 53 [2021-12-16 00:59:10,576 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:10,580 INFO L225 Difference]: With dead ends: 861 [2021-12-16 00:59:10,580 INFO L226 Difference]: Without dead ends: 859 [2021-12-16 00:59:10,581 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2021-12-16 00:59:10,581 INFO L933 BasicCegarLoop]: 87 mSDtfsCounter, 357 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 226 mSolverCounterSat, 163 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 358 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 389 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 163 IncrementalHoareTripleChecker+Valid, 226 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:10,582 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [358 Valid, 191 Invalid, 389 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [163 Valid, 226 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:10,583 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 859 states. [2021-12-16 00:59:10,617 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 859 to 695. [2021-12-16 00:59:10,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 695 states, 526 states have (on average 1.1977186311787071) internal successors, (630), 562 states have internal predecessors, (630), 86 states have call successors, (86), 70 states have call predecessors, (86), 82 states have return successors, (152), 85 states have call predecessors, (152), 86 states have call successors, (152) [2021-12-16 00:59:10,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 695 states to 695 states and 868 transitions. [2021-12-16 00:59:10,622 INFO L78 Accepts]: Start accepts. Automaton has 695 states and 868 transitions. Word has length 53 [2021-12-16 00:59:10,622 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:10,622 INFO L470 AbstractCegarLoop]: Abstraction has 695 states and 868 transitions. [2021-12-16 00:59:10,622 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 3 states have internal predecessors, (44), 1 states have call successors, (5), 5 states have call predecessors, (5), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-16 00:59:10,622 INFO L276 IsEmpty]: Start isEmpty. Operand 695 states and 868 transitions. [2021-12-16 00:59:10,624 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 93 [2021-12-16 00:59:10,624 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:10,624 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:10,625 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-16 00:59:10,625 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:10,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:10,625 INFO L85 PathProgramCache]: Analyzing trace with hash -1186209778, now seen corresponding path program 1 times [2021-12-16 00:59:10,625 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:10,625 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [815683573] [2021-12-16 00:59:10,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:10,626 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:10,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:10,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 00:59:10,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:10,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:59:10,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-16 00:59:10,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2021-12-16 00:59:10,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-16 00:59:10,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,754 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 21 proven. 4 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-16 00:59:10,755 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:10,755 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [815683573] [2021-12-16 00:59:10,755 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [815683573] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:10,755 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [345432233] [2021-12-16 00:59:10,755 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:10,756 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:10,758 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:10,760 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:10,784 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 00:59:10,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:10,883 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-16 00:59:10,889 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:11,114 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:11,114 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:59:11,114 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [345432233] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:11,115 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:59:11,115 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 10 [2021-12-16 00:59:11,115 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1879012217] [2021-12-16 00:59:11,115 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:11,115 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:59:11,116 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:11,116 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:59:11,116 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-16 00:59:11,116 INFO L87 Difference]: Start difference. First operand 695 states and 868 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2021-12-16 00:59:11,174 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:11,174 INFO L93 Difference]: Finished difference Result 1237 states and 1564 transitions. [2021-12-16 00:59:11,175 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:59:11,175 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 92 [2021-12-16 00:59:11,175 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:11,178 INFO L225 Difference]: With dead ends: 1237 [2021-12-16 00:59:11,178 INFO L226 Difference]: Without dead ends: 646 [2021-12-16 00:59:11,180 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 114 GetRequests, 106 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-16 00:59:11,181 INFO L933 BasicCegarLoop]: 130 mSDtfsCounter, 37 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:11,181 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [37 Valid, 193 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:11,182 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 646 states. [2021-12-16 00:59:11,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 646 to 646. [2021-12-16 00:59:11,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 646 states, 488 states have (on average 1.1885245901639345) internal successors, (580), 522 states have internal predecessors, (580), 81 states have call successors, (81), 65 states have call predecessors, (81), 76 states have return successors, (125), 81 states have call predecessors, (125), 81 states have call successors, (125) [2021-12-16 00:59:11,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 646 states to 646 states and 786 transitions. [2021-12-16 00:59:11,218 INFO L78 Accepts]: Start accepts. Automaton has 646 states and 786 transitions. Word has length 92 [2021-12-16 00:59:11,219 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:11,219 INFO L470 AbstractCegarLoop]: Abstraction has 646 states and 786 transitions. [2021-12-16 00:59:11,219 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2021-12-16 00:59:11,219 INFO L276 IsEmpty]: Start isEmpty. Operand 646 states and 786 transitions. [2021-12-16 00:59:11,226 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2021-12-16 00:59:11,226 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:11,227 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:11,254 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-12-16 00:59:11,451 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-16 00:59:11,452 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:11,452 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:11,452 INFO L85 PathProgramCache]: Analyzing trace with hash 429876390, now seen corresponding path program 1 times [2021-12-16 00:59:11,452 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:11,452 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1124125296] [2021-12-16 00:59:11,453 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:11,453 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:11,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:11,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:11,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:11,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 00:59:11,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:11,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:11,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:11,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:59:11,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:11,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-16 00:59:11,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:11,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-12-16 00:59:11,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:11,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2021-12-16 00:59:11,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:11,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:11,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:11,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2021-12-16 00:59:11,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:11,603 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-16 00:59:11,603 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:11,603 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1124125296] [2021-12-16 00:59:11,603 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1124125296] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:11,603 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2047566713] [2021-12-16 00:59:11,604 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:11,604 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:11,604 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:11,605 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:11,612 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-16 00:59:11,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:11,715 INFO L263 TraceCheckSpWp]: Trace formula consists of 475 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-16 00:59:11,718 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:11,982 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-12-16 00:59:11,983 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:59:11,983 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2047566713] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:11,983 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:59:11,983 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2021-12-16 00:59:11,984 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1377666306] [2021-12-16 00:59:11,984 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:11,984 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:11,984 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:11,985 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:11,985 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2021-12-16 00:59:11,985 INFO L87 Difference]: Start difference. First operand 646 states and 786 transitions. Second operand has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-16 00:59:12,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:12,076 INFO L93 Difference]: Finished difference Result 1174 states and 1422 transitions. [2021-12-16 00:59:12,076 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:59:12,077 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) Word has length 97 [2021-12-16 00:59:12,077 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:12,077 INFO L225 Difference]: With dead ends: 1174 [2021-12-16 00:59:12,078 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 00:59:12,080 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 107 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=62, Invalid=358, Unknown=0, NotChecked=0, Total=420 [2021-12-16 00:59:12,081 INFO L933 BasicCegarLoop]: 158 mSDtfsCounter, 46 mSDsluCounter, 580 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 738 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:12,081 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [47 Valid, 738 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:12,082 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 00:59:12,082 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 00:59:12,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 00:59:12,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 00:59:12,082 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 97 [2021-12-16 00:59:12,083 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:12,083 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 00:59:12,083 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 6 states have internal predecessors, (74), 3 states have call successors, (9), 3 states have call predecessors, (9), 4 states have return successors, (9), 4 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-16 00:59:12,083 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 00:59:12,083 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 00:59:12,085 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 00:59:12,113 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-16 00:59:12,307 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-12-16 00:59:12,309 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 00:59:16,153 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 173 179) no Hoare annotation was computed. [2021-12-16 00:59:16,154 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 173 179) the Hoare annotation is: true [2021-12-16 00:59:16,154 INFO L858 garLoopResultBuilder]: For program point L530-1(lines 526 537) no Hoare annotation was computed. [2021-12-16 00:59:16,154 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 526 537) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~pumpRunning~0))) (.cse5 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse7 (not (= ~pumpRunning~0 0))) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse2 .cse6 (not (<= 2 ~waterLevel~0))) (or .cse0 .cse7 .cse5 .cse6 .cse4) (or .cse0 .cse1 .cse7 .cse3 .cse4))) [2021-12-16 00:59:16,155 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 526 537) no Hoare annotation was computed. [2021-12-16 00:59:16,155 INFO L858 garLoopResultBuilder]: For program point L417(lines 417 421) no Hoare annotation was computed. [2021-12-16 00:59:16,155 INFO L861 garLoopResultBuilder]: At program point L417-1(lines 417 421) the Hoare annotation is: true [2021-12-16 00:59:16,155 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 403 432) no Hoare annotation was computed. [2021-12-16 00:59:16,155 INFO L858 garLoopResultBuilder]: For program point L414(line 414) no Hoare annotation was computed. [2021-12-16 00:59:16,155 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 403 432) the Hoare annotation is: true [2021-12-16 00:59:16,156 INFO L861 garLoopResultBuilder]: At program point L413-2(lines 413 427) the Hoare annotation is: true [2021-12-16 00:59:16,156 INFO L861 garLoopResultBuilder]: At program point L409(line 409) the Hoare annotation is: true [2021-12-16 00:59:16,156 INFO L858 garLoopResultBuilder]: For program point L409-1(line 409) no Hoare annotation was computed. [2021-12-16 00:59:16,156 INFO L861 garLoopResultBuilder]: At program point L428(lines 403 432) the Hoare annotation is: true [2021-12-16 00:59:16,156 INFO L858 garLoopResultBuilder]: For program point L424(line 424) no Hoare annotation was computed. [2021-12-16 00:59:16,157 INFO L854 garLoopResultBuilder]: At program point L221(line 221) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse5) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse5) (or .cse0 .cse2 .cse4 .cse3) (or .cse0 .cse1 .cse5 .cse3))) [2021-12-16 00:59:16,158 INFO L858 garLoopResultBuilder]: For program point L506(lines 506 510) no Hoare annotation was computed. [2021-12-16 00:59:16,158 INFO L854 garLoopResultBuilder]: At program point L506-2(lines 502 513) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse4) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse6 .cse3) (or .cse0 .cse5 .cse6 .cse4))) [2021-12-16 00:59:16,158 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 149 172) no Hoare annotation was computed. [2021-12-16 00:59:16,158 INFO L854 garLoopResultBuilder]: At program point L226(line 226) the Hoare annotation is: (let ((.cse2 (= ~methAndRunningLastTime~0 0)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse6 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse1 (and .cse6 .cse2 .cse7) .cse4) (or .cse0 .cse3 .cse8) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse5 .cse8) (or .cse0 .cse5 .cse8 .cse4) (or .cse0 (and .cse6 .cse7) .cse1 .cse3 .cse4))) [2021-12-16 00:59:16,158 INFO L854 garLoopResultBuilder]: At program point L226-1(lines 207 231) the Hoare annotation is: (let ((.cse10 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= 0 ~systemActive~0)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse2 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse14 (not .cse0) (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse9)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse1 (not .cse14)) (.cse11 (<= 1 ~pumpRunning~0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse13 (and .cse10 .cse9)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse4 .cse1 .cse5 .cse6 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse8) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse9 .cse3) (or .cse0 (and .cse10 .cse11 .cse12 .cse6) .cse13 .cse1 .cse5 .cse8) (or .cse0 (and .cse10 .cse11 .cse12) .cse13 .cse5 .cse7 .cse8)))) [2021-12-16 00:59:16,158 INFO L854 garLoopResultBuilder]: At program point L255(lines 248 258) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (and .cse4 .cse5) .cse6) (or .cse0 .cse4 .cse7 .cse6) (or .cse0 (and .cse4 (= ~methAndRunningLastTime~0 0) .cse5) .cse1 .cse6 .cse3) (or .cse0 .cse2 .cse7 .cse3))) [2021-12-16 00:59:16,158 INFO L858 garLoopResultBuilder]: For program point L160-1(lines 160 166) no Hoare annotation was computed. [2021-12-16 00:59:16,158 INFO L858 garLoopResultBuilder]: For program point L82(lines 82 92) no Hoare annotation was computed. [2021-12-16 00:59:16,158 INFO L858 garLoopResultBuilder]: For program point L78(lines 78 95) no Hoare annotation was computed. [2021-12-16 00:59:16,159 INFO L854 garLoopResultBuilder]: At program point L78-1(lines 70 98) the Hoare annotation is: (let ((.cse1 (= ~methAndRunningLastTime~0 0)) (.cse0 (= 0 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse14 (<= 1 ~methaneLevelCritical~0))) (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (not .cse14)) (.cse13 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse1 .cse14 (not .cse0) (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse2)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (<= 1 ~pumpRunning~0)) (.cse9 (<= 2 ~waterLevel~0)) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse3 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~0#1| 0)) (.cse12 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 (and .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse3) .cse5 .cse6) (or .cse0 (and .cse7 .cse4 .cse1) (and .cse7 .cse8 .cse9) .cse10 .cse11 .cse12) (or .cse0 .cse10 .cse13 .cse6 .cse12) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse10 .cse13 .cse6) (or .cse0 (and .cse7 .cse8 .cse9 .cse1 .cse3) .cse11 .cse5 (and .cse7 .cse1 .cse2 .cse3) .cse12)))) [2021-12-16 00:59:16,159 INFO L854 garLoopResultBuilder]: At program point L264(lines 259 267) the Hoare annotation is: (let ((.cse9 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse0 (= 0 ~systemActive~0)) (.cse10 (= ~pumpRunning~0 0))) (let ((.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (and .cse9 (<= 1 |timeShift_processEnvironment_~tmp~2#1|) (not .cse0) (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse10)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse5 .cse6 .cse4) (or .cse0 .cse7 .cse3) (or .cse0 .cse5 .cse7 .cse4) (let ((.cse8 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and .cse8 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse6) .cse2 (and .cse9 .cse8 .cse10) .cse5 .cse4)) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2 .cse3)))) [2021-12-16 00:59:16,159 INFO L858 garLoopResultBuilder]: For program point L153-1(lines 152 171) no Hoare annotation was computed. [2021-12-16 00:59:16,159 INFO L858 garLoopResultBuilder]: For program point L215(lines 215 223) no Hoare annotation was computed. [2021-12-16 00:59:16,159 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2021-12-16 00:59:16,159 INFO L858 garLoopResultBuilder]: For program point L211(lines 211 228) no Hoare annotation was computed. [2021-12-16 00:59:16,159 INFO L858 garLoopResultBuilder]: For program point L83(lines 83 89) no Hoare annotation was computed. [2021-12-16 00:59:16,159 INFO L854 garLoopResultBuilder]: At program point L253(line 253) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse4) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse6 .cse3) (or .cse0 .cse5 .cse6 .cse4))) [2021-12-16 00:59:16,159 INFO L858 garLoopResultBuilder]: For program point L253-1(line 253) no Hoare annotation was computed. [2021-12-16 00:59:16,160 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse5) (or .cse0 .cse2 .cse4 .cse3) (or .cse0 .cse1 .cse5 .cse3))) [2021-12-16 00:59:16,160 INFO L854 garLoopResultBuilder]: At program point L245(lines 240 247) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0))) (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not .cse8)) (.cse5 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse8 (not .cse0) (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse2)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse4 .cse5 .cse3) (or .cse0 .cse4 .cse6 .cse7) (or .cse0 .cse6 .cse1 .cse7) (or .cse0 .cse4 .cse5 .cse3 .cse7)))) [2021-12-16 00:59:16,160 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 149 172) the Hoare annotation is: (let ((.cse10 (= ~methAndRunningLastTime~0 0)) (.cse8 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse1 (and .cse8 .cse9)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and .cse8 .cse10 (= ~pumpRunning~0 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse6 .cse7) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse4 .cse3) (or .cse0 (and .cse8 .cse9 .cse10) .cse4 .cse3 .cse7) (or .cse0 .cse5 .cse2 .cse6 .cse7)))) [2021-12-16 00:59:16,160 INFO L854 garLoopResultBuilder]: At program point L76(line 76) the Hoare annotation is: (let ((.cse10 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= 0 ~systemActive~0)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse2 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse14 (not .cse0) (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse9)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse1 (not .cse14)) (.cse11 (<= 1 ~pumpRunning~0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse13 (and .cse10 .cse9)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse4 .cse1 .cse5 .cse6 .cse8) (or .cse0 .cse1 .cse2 .cse3 .cse8) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse9 .cse3) (or .cse0 (and .cse10 .cse11 .cse12 .cse6) .cse13 .cse1 .cse5 .cse8) (or .cse0 (and .cse10 .cse11 .cse12) .cse13 .cse5 .cse7 .cse8)))) [2021-12-16 00:59:16,160 INFO L858 garLoopResultBuilder]: For program point L76-1(line 76) no Hoare annotation was computed. [2021-12-16 00:59:16,160 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 149 172) no Hoare annotation was computed. [2021-12-16 00:59:16,161 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2021-12-16 00:59:16,161 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 538 546) the Hoare annotation is: true [2021-12-16 00:59:16,161 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 538 546) no Hoare annotation was computed. [2021-12-16 00:59:16,161 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 538 546) no Hoare annotation was computed. [2021-12-16 00:59:16,161 INFO L854 garLoopResultBuilder]: At program point L118(lines 114 120) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 00:59:16,161 INFO L861 garLoopResultBuilder]: At program point L494(lines 475 497) the Hoare annotation is: true [2021-12-16 00:59:16,161 INFO L854 garLoopResultBuilder]: At program point L461(lines 457 463) the Hoare annotation is: (and (= 1 |ULTIMATE.start_main_~tmp~5#1|) (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 00:59:16,162 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 00:59:16,162 INFO L858 garLoopResultBuilder]: For program point L383(lines 383 387) no Hoare annotation was computed. [2021-12-16 00:59:16,162 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 00:59:16,162 INFO L854 garLoopResultBuilder]: At program point L383-2(lines 375 388) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~5#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse7 (<= 2 ~waterLevel~0) .cse8 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse7 .cse5) (and .cse0 .cse1 .cse2 .cse4 .cse8 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse7 .cse4 .cse8 .cse5))) [2021-12-16 00:59:16,162 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 00:59:16,162 INFO L858 garLoopResultBuilder]: For program point L346(lines 345 392) no Hoare annotation was computed. [2021-12-16 00:59:16,162 INFO L858 garLoopResultBuilder]: For program point L375(lines 375 388) no Hoare annotation was computed. [2021-12-16 00:59:16,163 INFO L854 garLoopResultBuilder]: At program point L367(line 367) the Hoare annotation is: (let ((.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~5#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse7 (<= 2 ~waterLevel~0) .cse8 .cse5) (and .cse0 .cse1 .cse2 .cse4 .cse8 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse7 .cse4 .cse5))) [2021-12-16 00:59:16,163 INFO L861 garLoopResultBuilder]: At program point L396(lines 335 400) the Hoare annotation is: true [2021-12-16 00:59:16,163 INFO L858 garLoopResultBuilder]: For program point L355(lines 355 361) no Hoare annotation was computed. [2021-12-16 00:59:16,163 INFO L858 garLoopResultBuilder]: For program point L355-1(lines 355 361) no Hoare annotation was computed. [2021-12-16 00:59:16,164 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 00:59:16,164 INFO L858 garLoopResultBuilder]: For program point L347(lines 347 351) no Hoare annotation was computed. [2021-12-16 00:59:16,164 INFO L854 garLoopResultBuilder]: At program point L393(lines 344 394) the Hoare annotation is: false [2021-12-16 00:59:16,164 INFO L854 garLoopResultBuilder]: At program point L133(lines 128 136) the Hoare annotation is: (and (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 00:59:16,164 INFO L854 garLoopResultBuilder]: At program point L67(lines 62 69) the Hoare annotation is: (and (= 1 |ULTIMATE.start_main_~tmp~5#1|) (= ~waterLevel~0 1) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 00:59:16,164 INFO L854 garLoopResultBuilder]: At program point L125(lines 121 127) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (not (= 0 ~systemActive~0)) (= ~pumpRunning~0 0)) [2021-12-16 00:59:16,165 INFO L861 garLoopResultBuilder]: At program point L472(lines 464 474) the Hoare annotation is: true [2021-12-16 00:59:16,165 INFO L858 garLoopResultBuilder]: For program point L365(lines 365 371) no Hoare annotation was computed. [2021-12-16 00:59:16,165 INFO L858 garLoopResultBuilder]: For program point L365-1(lines 365 371) no Hoare annotation was computed. [2021-12-16 00:59:16,165 INFO L854 garLoopResultBuilder]: At program point L328(lines 323 330) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~5#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse7 (<= 2 ~waterLevel~0) .cse8 .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse7 .cse5) (and .cse0 .cse1 .cse2 .cse4 .cse8 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse7 .cse4 .cse8 .cse5))) [2021-12-16 00:59:16,165 INFO L854 garLoopResultBuilder]: At program point L390(lines 345 392) the Hoare annotation is: (let ((.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~5#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse7 (<= 2 ~waterLevel~0) .cse8 .cse5) (and .cse0 .cse1 .cse2 .cse4 .cse8 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse7 .cse4 .cse5))) [2021-12-16 00:59:16,165 INFO L858 garLoopResultBuilder]: For program point L485(lines 485 492) no Hoare annotation was computed. [2021-12-16 00:59:16,166 INFO L854 garLoopResultBuilder]: At program point L357(line 357) the Hoare annotation is: (let ((.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~5#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse7 (<= 2 ~waterLevel~0) .cse8 .cse5) (and .cse0 .cse1 .cse2 .cse4 .cse8 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse7 .cse4 .cse5))) [2021-12-16 00:59:16,166 INFO L858 garLoopResultBuilder]: For program point L485-2(lines 485 492) no Hoare annotation was computed. [2021-12-16 00:59:16,166 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 181 205) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= 0 ~systemActive~0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0))) (and (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse2 .cse1 .cse3) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0)) .cse3))) [2021-12-16 00:59:16,166 INFO L858 garLoopResultBuilder]: For program point L583(lines 583 589) no Hoare annotation was computed. [2021-12-16 00:59:16,166 INFO L854 garLoopResultBuilder]: At program point L195(line 195) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not .cse1) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse1 .cse3 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 .cse2 .cse3)))) [2021-12-16 00:59:16,167 INFO L854 garLoopResultBuilder]: At program point L319(lines 304 322) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0))) (let ((.cse0 (and (<= 2 ~waterLevel~0) (= ~pumpRunning~0 0))) (.cse2 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not .cse1))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse0 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse1 .cse4 (not (<= 1 |old(~pumpRunning~0)|)))))) [2021-12-16 00:59:16,167 INFO L858 garLoopResultBuilder]: For program point L189(lines 189 197) no Hoare annotation was computed. [2021-12-16 00:59:16,167 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 181 205) no Hoare annotation was computed. [2021-12-16 00:59:16,168 INFO L858 garLoopResultBuilder]: For program point L185(lines 185 202) no Hoare annotation was computed. [2021-12-16 00:59:16,168 INFO L858 garLoopResultBuilder]: For program point L313(lines 313 317) no Hoare annotation was computed. [2021-12-16 00:59:16,169 INFO L858 garLoopResultBuilder]: For program point L313-2(lines 313 317) no Hoare annotation was computed. [2021-12-16 00:59:16,169 INFO L854 garLoopResultBuilder]: At program point L237(lines 232 239) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse3 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 .cse2 .cse3))) [2021-12-16 00:59:16,169 INFO L854 garLoopResultBuilder]: At program point L588(lines 579 592) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0)) (.cse0 (and (<= 2 ~waterLevel~0) .cse5)) (.cse2 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse5)) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse4 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse1 .cse0 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0)))))) [2021-12-16 00:59:16,169 INFO L854 garLoopResultBuilder]: At program point L200(line 200) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2021-12-16 00:59:16,169 INFO L858 garLoopResultBuilder]: For program point L200-1(lines 181 205) no Hoare annotation was computed. [2021-12-16 00:59:16,169 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 514 525) no Hoare annotation was computed. [2021-12-16 00:59:16,170 INFO L858 garLoopResultBuilder]: For program point L518-1(lines 514 525) no Hoare annotation was computed. [2021-12-16 00:59:16,170 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 514 525) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~pumpRunning~0))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (= ~pumpRunning~0 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse2 .cse3 .cse4) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse6 .cse5 .cse2) (or .cse0 .cse1 .cse6 .cse2 .cse3))) [2021-12-16 00:59:16,173 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:16,174 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 00:59:16,218 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 12:59:16 BoogieIcfgContainer [2021-12-16 00:59:16,226 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 00:59:16,227 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 00:59:16,227 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 00:59:16,227 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 00:59:16,227 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:07" (3/4) ... [2021-12-16 00:59:16,230 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 00:59:16,237 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 00:59:16,237 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 00:59:16,238 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 00:59:16,238 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 00:59:16,238 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-16 00:59:16,238 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:59:16,238 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 00:59:16,250 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2021-12-16 00:59:16,251 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 00:59:16,251 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 00:59:16,252 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 00:59:16,252 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 00:59:16,253 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:59:16,253 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:59:16,274 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((waterLevel == 1 && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-16 00:59:16,274 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == tmp && waterLevel == 1) && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-16 00:59:16,274 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == tmp && waterLevel == 1) && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 [2021-12-16 00:59:16,275 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= pumpRunning) && 2 <= waterLevel) && 1 <= methaneLevelCritical) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && 1 <= pumpRunning) && methAndRunningLastTime == 0) && !(0 == systemActive)) [2021-12-16 00:59:16,276 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0 == systemActive || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:16,277 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && 1 <= methaneLevelCritical) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(\old(pumpRunning) == 0)) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || methAndRunningLastTime == 0) || !(\old(methAndRunningLastTime) == 0))) && ((((0 == systemActive || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && 1 <= methaneLevelCritical) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && ((((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || (((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && methAndRunningLastTime == 0)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((((0 == systemActive || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:16,278 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= pumpRunning) && 2 <= waterLevel) && 1 <= methaneLevelCritical) && !(0 == systemActive))) || (((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && 1 <= pumpRunning) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= pumpRunning) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) [2021-12-16 00:59:16,278 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0 == systemActive || ((methAndRunningLastTime == 0 && pumpRunning == 0) && tmp == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || ((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0)) || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((0 == systemActive || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || ((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && methAndRunningLastTime == 0) && tmp == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (((waterLevel == \old(waterLevel) && methAndRunningLastTime == 0) && pumpRunning == 0) && tmp == 0)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:16,278 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((0 == systemActive || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:16,279 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == systemActive || ((((\result == 0 && 1 <= tmp) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || methAndRunningLastTime == 0) || !(\old(methAndRunningLastTime) == 0))) && ((0 == systemActive || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((((0 == systemActive || (((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || ((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((((\result == 0 && 1 <= tmp) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) [2021-12-16 00:59:16,279 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == systemActive || !(methaneLevelCritical == 0)) || pumpRunning == 0) || !(1 <= \old(pumpRunning))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && 1 <= methaneLevelCritical) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((0 == systemActive || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && 1 <= methaneLevelCritical) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:16,279 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && ((0 == systemActive || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) [2021-12-16 00:59:16,279 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && ((0 == systemActive || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:16,279 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || (((\result == 0 && tmp___0 == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || (((\result == 0 && tmp___0 == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0))) && ((0 == systemActive || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) [2021-12-16 00:59:16,280 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == systemActive || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) && ((0 == systemActive || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || (1 <= pumpRunning && 2 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) [2021-12-16 00:59:16,324 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 00:59:16,324 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 00:59:16,325 INFO L158 Benchmark]: Toolchain (without parser) took 9749.89ms. Allocated memory was 98.6MB in the beginning and 144.7MB in the end (delta: 46.1MB). Free memory was 68.7MB in the beginning and 75.1MB in the end (delta: -6.4MB). Peak memory consumption was 38.1MB. Max. memory is 16.1GB. [2021-12-16 00:59:16,325 INFO L158 Benchmark]: CDTParser took 0.24ms. Allocated memory is still 98.6MB. Free memory is still 57.4MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 00:59:16,325 INFO L158 Benchmark]: CACSL2BoogieTranslator took 372.64ms. Allocated memory is still 98.6MB. Free memory was 68.4MB in the beginning and 66.9MB in the end (delta: 1.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-16 00:59:16,326 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.82ms. Allocated memory is still 98.6MB. Free memory was 66.9MB in the beginning and 64.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:59:16,326 INFO L158 Benchmark]: Boogie Preprocessor took 40.82ms. Allocated memory is still 98.6MB. Free memory was 64.4MB in the beginning and 63.0MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:59:16,327 INFO L158 Benchmark]: RCFGBuilder took 442.20ms. Allocated memory was 98.6MB in the beginning and 119.5MB in the end (delta: 21.0MB). Free memory was 63.0MB in the beginning and 92.7MB in the end (delta: -29.7MB). Peak memory consumption was 17.1MB. Max. memory is 16.1GB. [2021-12-16 00:59:16,327 INFO L158 Benchmark]: TraceAbstraction took 8735.84ms. Allocated memory was 119.5MB in the beginning and 144.7MB in the end (delta: 25.2MB). Free memory was 92.2MB in the beginning and 81.4MB in the end (delta: 10.8MB). Peak memory consumption was 82.6MB. Max. memory is 16.1GB. [2021-12-16 00:59:16,327 INFO L158 Benchmark]: Witness Printer took 98.04ms. Allocated memory is still 144.7MB. Free memory was 81.4MB in the beginning and 75.1MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-16 00:59:16,330 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24ms. Allocated memory is still 98.6MB. Free memory is still 57.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 372.64ms. Allocated memory is still 98.6MB. Free memory was 68.4MB in the beginning and 66.9MB in the end (delta: 1.5MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.82ms. Allocated memory is still 98.6MB. Free memory was 66.9MB in the beginning and 64.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 40.82ms. Allocated memory is still 98.6MB. Free memory was 64.4MB in the beginning and 63.0MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 442.20ms. Allocated memory was 98.6MB in the beginning and 119.5MB in the end (delta: 21.0MB). Free memory was 63.0MB in the beginning and 92.7MB in the end (delta: -29.7MB). Peak memory consumption was 17.1MB. Max. memory is 16.1GB. * TraceAbstraction took 8735.84ms. Allocated memory was 119.5MB in the beginning and 144.7MB in the end (delta: 25.2MB). Free memory was 92.2MB in the beginning and 81.4MB in the end (delta: 10.8MB). Peak memory consumption was 82.6MB. Max. memory is 16.1GB. * Witness Printer took 98.04ms. Allocated memory is still 144.7MB. Free memory was 81.4MB in the beginning and 75.1MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 88 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.6s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.8s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1418 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1387 mSDsluCounter, 3594 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2319 mSDsCounter, 414 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1230 IncrementalHoareTripleChecker+Invalid, 1644 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 414 mSolverCounterUnsat, 1275 mSDtfsCounter, 1230 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 393 GetRequests, 291 SyntacticMatches, 1 SemanticMatches, 101 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 144 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=695occurred in iteration=10, InterpolantAutomatonStates: 89, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 231 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 41 LocationsWithAnnotation, 1377 PreInvPairs, 1576 NumberOfFragments, 2663 HoareAnnotationTreeSize, 1377 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 41 FomulaSimplificationsInter, 12539 FormulaSimplificationTreeSizeReductionInter, 3.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.4s InterpolantComputationTime, 787 NumberOfCodeBlocks, 787 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 773 ConstructedInterpolants, 0 QuantifiedInterpolants, 1478 SizeOfPredicates, 5 NumberOfNonLiveVariables, 947 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 14 InterpolantComputations, 12 PerfectInterpolantSequences, 133/140 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 344]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 464]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 413]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((1 == tmp && waterLevel == 1) && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 457]: Loop Invariant Derived loop invariant: (((((1 == tmp && waterLevel == 1) && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 207]: Loop Invariant Derived loop invariant: (((((((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && 1 <= methaneLevelCritical) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(\old(pumpRunning) == 0)) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || methAndRunningLastTime == 0) || !(\old(methAndRunningLastTime) == 0))) && ((((0 == systemActive || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && 1 <= methaneLevelCritical) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && ((((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || (((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && methAndRunningLastTime == 0)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((((0 == systemActive || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel)) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 403]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: (((((((0 == systemActive || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 259]: Loop Invariant Derived loop invariant: ((((((((0 == systemActive || ((((\result == 0 && 1 <= tmp) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) && (((((0 == systemActive || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || methAndRunningLastTime == 0) || !(\old(methAndRunningLastTime) == 0))) && ((0 == systemActive || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((((0 == systemActive || (((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || ((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || ((((\result == 0 && 1 <= tmp) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 114]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 345]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= pumpRunning) && 2 <= waterLevel) && 1 <= methaneLevelCritical) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && 1 <= pumpRunning) && methAndRunningLastTime == 0) && !(0 == systemActive)) - InvariantResult [Line: 128]: Loop Invariant Derived loop invariant: ((((waterLevel == 1 && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0 - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 70]: Loop Invariant Derived loop invariant: (((((((0 == systemActive || ((methAndRunningLastTime == 0 && pumpRunning == 0) && tmp == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((((0 == systemActive || ((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0)) || ((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((0 == systemActive || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || (((((1 <= tmp && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || ((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && methAndRunningLastTime == 0) && tmp == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (((waterLevel == \old(waterLevel) && methAndRunningLastTime == 0) && pumpRunning == 0) && tmp == 0)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && ((0 == systemActive || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 240]: Loop Invariant Derived loop invariant: ((((((0 == systemActive || !(methaneLevelCritical == 0)) || pumpRunning == 0) || !(1 <= \old(pumpRunning))) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && 1 <= methaneLevelCritical) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((0 == systemActive || !(1 <= methaneLevelCritical)) || ((((1 <= tmp && 1 <= methaneLevelCritical) && !(0 == systemActive)) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 248]: Loop Invariant Derived loop invariant: ((((((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) && ((((!(2 <= \old(waterLevel)) || 0 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((0 == systemActive || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && (((0 == systemActive || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 579]: Loop Invariant Derived loop invariant: ((((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || (1 <= \result && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && ((0 == systemActive || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 232]: Loop Invariant Derived loop invariant: (((((0 == systemActive || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) && ((0 == systemActive || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((0 == systemActive || (1 <= pumpRunning && 2 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 323]: Loop Invariant Derived loop invariant: (((((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && !(0 == systemActive)) && pumpRunning == 0) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= pumpRunning) && 2 <= waterLevel) && 1 <= methaneLevelCritical) && !(0 == systemActive))) || (((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methaneLevelCritical == 0) && 1 <= pumpRunning) && !(0 == systemActive))) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= pumpRunning) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && !(0 == systemActive)) - InvariantResult [Line: 304]: Loop Invariant Derived loop invariant: ((((((2 <= waterLevel && pumpRunning == 0) || 0 == systemActive) || (((\result == 0 && tmp___0 == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || (((\result == 0 && tmp___0 == 0) && pumpRunning == \old(pumpRunning)) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0))) && ((0 == systemActive || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) RESULT: Ultimate proved your program to be correct! [2021-12-16 00:59:16,387 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE