./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 909de5fe3a7d5a638d67615e2b4d48b563eefeab07033d1b2a29843c731be596 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 00:59:19,446 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 00:59:19,448 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 00:59:19,502 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 00:59:19,506 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 00:59:19,507 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 00:59:19,509 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 00:59:19,512 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 00:59:19,514 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 00:59:19,515 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 00:59:19,515 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 00:59:19,516 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 00:59:19,517 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 00:59:19,519 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 00:59:19,521 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 00:59:19,522 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 00:59:19,523 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 00:59:19,524 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 00:59:19,525 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 00:59:19,526 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 00:59:19,527 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 00:59:19,528 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 00:59:19,528 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 00:59:19,529 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 00:59:19,530 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 00:59:19,531 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 00:59:19,531 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 00:59:19,547 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 00:59:19,548 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 00:59:19,549 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 00:59:19,549 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 00:59:19,550 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 00:59:19,551 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 00:59:19,551 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 00:59:19,552 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 00:59:19,553 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 00:59:19,554 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 00:59:19,554 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 00:59:19,554 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 00:59:19,554 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 00:59:19,555 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 00:59:19,556 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 00:59:19,581 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 00:59:19,581 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 00:59:19,582 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 00:59:19,582 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 00:59:19,582 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 00:59:19,583 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 00:59:19,583 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 00:59:19,583 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 00:59:19,583 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 00:59:19,583 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 00:59:19,584 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 00:59:19,585 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 00:59:19,585 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 00:59:19,585 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 00:59:19,585 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 00:59:19,585 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 00:59:19,585 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 00:59:19,585 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 00:59:19,585 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 00:59:19,586 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 00:59:19,586 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 00:59:19,586 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 00:59:19,586 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 00:59:19,586 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 00:59:19,586 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:59:19,586 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 00:59:19,587 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 00:59:19,587 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 00:59:19,587 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 00:59:19,587 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 00:59:19,587 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 00:59:19,587 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 00:59:19,588 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 00:59:19,588 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 00:59:19,588 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 909de5fe3a7d5a638d67615e2b4d48b563eefeab07033d1b2a29843c731be596 [2021-12-16 00:59:19,782 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 00:59:19,798 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 00:59:19,800 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 00:59:19,804 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 00:59:19,805 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 00:59:19,806 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c [2021-12-16 00:59:19,857 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b3693ccee/768575718de446f3a75691cab56c02b3/FLAG59d87fb15 [2021-12-16 00:59:20,251 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 00:59:20,254 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c [2021-12-16 00:59:20,263 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b3693ccee/768575718de446f3a75691cab56c02b3/FLAG59d87fb15 [2021-12-16 00:59:20,274 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b3693ccee/768575718de446f3a75691cab56c02b3 [2021-12-16 00:59:20,276 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 00:59:20,278 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 00:59:20,279 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 00:59:20,279 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 00:59:20,281 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 00:59:20,281 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:59:20" (1/1) ... [2021-12-16 00:59:20,283 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4bf2bd48 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:20, skipping insertion in model container [2021-12-16 00:59:20,283 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:59:20" (1/1) ... [2021-12-16 00:59:20,288 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 00:59:20,327 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 00:59:20,556 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c[19040,19053] [2021-12-16 00:59:20,558 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:59:20,563 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 00:59:20,638 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c[19040,19053] [2021-12-16 00:59:20,638 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:59:20,649 INFO L208 MainTranslator]: Completed translation [2021-12-16 00:59:20,650 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:20 WrapperNode [2021-12-16 00:59:20,650 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 00:59:20,651 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 00:59:20,651 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 00:59:20,651 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 00:59:20,656 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:20" (1/1) ... [2021-12-16 00:59:20,670 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:20" (1/1) ... [2021-12-16 00:59:20,691 INFO L137 Inliner]: procedures = 57, calls = 157, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 276 [2021-12-16 00:59:20,692 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 00:59:20,694 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 00:59:20,695 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 00:59:20,695 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 00:59:20,701 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:20" (1/1) ... [2021-12-16 00:59:20,701 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:20" (1/1) ... [2021-12-16 00:59:20,710 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:20" (1/1) ... [2021-12-16 00:59:20,710 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:20" (1/1) ... [2021-12-16 00:59:20,717 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:20" (1/1) ... [2021-12-16 00:59:20,721 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:20" (1/1) ... [2021-12-16 00:59:20,732 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:20" (1/1) ... [2021-12-16 00:59:20,734 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 00:59:20,734 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 00:59:20,747 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 00:59:20,747 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 00:59:20,748 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:20" (1/1) ... [2021-12-16 00:59:20,753 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:59:20,763 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:20,772 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 00:59:20,779 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 00:59:20,801 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 00:59:20,801 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 00:59:20,801 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 00:59:20,801 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 00:59:20,801 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 00:59:20,802 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 00:59:20,802 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 00:59:20,802 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-16 00:59:20,802 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-16 00:59:20,802 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:59:20,802 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:59:20,802 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 00:59:20,802 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 00:59:20,802 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 00:59:20,803 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 00:59:20,803 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 00:59:20,803 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 00:59:20,803 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 00:59:20,903 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 00:59:20,904 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 00:59:21,149 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 00:59:21,154 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 00:59:21,160 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 00:59:21,162 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:21 BoogieIcfgContainer [2021-12-16 00:59:21,162 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 00:59:21,164 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 00:59:21,164 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 00:59:21,168 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 00:59:21,168 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 12:59:20" (1/3) ... [2021-12-16 00:59:21,169 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@23c8ec90 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:59:21, skipping insertion in model container [2021-12-16 00:59:21,169 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:20" (2/3) ... [2021-12-16 00:59:21,169 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@23c8ec90 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:59:21, skipping insertion in model container [2021-12-16 00:59:21,169 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:21" (3/3) ... [2021-12-16 00:59:21,170 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product57.cil.c [2021-12-16 00:59:21,173 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 00:59:21,174 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 00:59:21,212 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 00:59:21,217 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 00:59:21,217 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 00:59:21,231 INFO L276 IsEmpty]: Start isEmpty. Operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 80 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2021-12-16 00:59:21,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-16 00:59:21,237 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:21,238 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:21,238 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:21,241 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:21,242 INFO L85 PathProgramCache]: Analyzing trace with hash 1702094398, now seen corresponding path program 1 times [2021-12-16 00:59:21,247 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:21,248 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [864629285] [2021-12-16 00:59:21,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:21,248 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:21,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:21,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 00:59:21,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:21,404 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:21,404 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:21,404 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [864629285] [2021-12-16 00:59:21,405 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [864629285] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:21,405 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:21,405 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 00:59:21,406 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1008905506] [2021-12-16 00:59:21,407 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:21,409 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 00:59:21,409 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:21,428 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 00:59:21,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:59:21,431 INFO L87 Difference]: Start difference. First operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 80 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:21,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:21,461 INFO L93 Difference]: Finished difference Result 177 states and 242 transitions. [2021-12-16 00:59:21,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 00:59:21,463 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-16 00:59:21,463 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:21,469 INFO L225 Difference]: With dead ends: 177 [2021-12-16 00:59:21,469 INFO L226 Difference]: Without dead ends: 84 [2021-12-16 00:59:21,471 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:59:21,474 INFO L933 BasicCegarLoop]: 118 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 118 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:21,475 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:21,485 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2021-12-16 00:59:21,498 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2021-12-16 00:59:21,499 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 65 states have (on average 1.323076923076923) internal successors, (86), 72 states have internal predecessors, (86), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-16 00:59:21,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 109 transitions. [2021-12-16 00:59:21,502 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 109 transitions. Word has length 25 [2021-12-16 00:59:21,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:21,502 INFO L470 AbstractCegarLoop]: Abstraction has 84 states and 109 transitions. [2021-12-16 00:59:21,502 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:21,502 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 109 transitions. [2021-12-16 00:59:21,506 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-16 00:59:21,506 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:21,506 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:21,506 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 00:59:21,507 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:21,509 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:21,510 INFO L85 PathProgramCache]: Analyzing trace with hash 2038444326, now seen corresponding path program 1 times [2021-12-16 00:59:21,510 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:21,511 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1665364391] [2021-12-16 00:59:21,511 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:21,511 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:21,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:21,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-16 00:59:21,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:21,577 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:21,577 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:21,577 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1665364391] [2021-12-16 00:59:21,577 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1665364391] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:21,577 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:21,577 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:59:21,578 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [51242778] [2021-12-16 00:59:21,578 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:21,578 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:59:21,579 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:21,579 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:59:21,580 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:21,580 INFO L87 Difference]: Start difference. First operand 84 states and 109 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:21,598 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:21,598 INFO L93 Difference]: Finished difference Result 133 states and 173 transitions. [2021-12-16 00:59:21,598 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:59:21,598 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-16 00:59:21,598 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:21,599 INFO L225 Difference]: With dead ends: 133 [2021-12-16 00:59:21,599 INFO L226 Difference]: Without dead ends: 75 [2021-12-16 00:59:21,600 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:21,601 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 12 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:21,601 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 176 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:21,602 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2021-12-16 00:59:21,606 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2021-12-16 00:59:21,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3389830508474576) internal successors, (79), 66 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-16 00:59:21,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 97 transitions. [2021-12-16 00:59:21,608 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 97 transitions. Word has length 26 [2021-12-16 00:59:21,608 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:21,608 INFO L470 AbstractCegarLoop]: Abstraction has 75 states and 97 transitions. [2021-12-16 00:59:21,608 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:21,608 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 97 transitions. [2021-12-16 00:59:21,609 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-16 00:59:21,609 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:21,609 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:21,609 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 00:59:21,609 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:21,610 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:21,610 INFO L85 PathProgramCache]: Analyzing trace with hash -1677666248, now seen corresponding path program 1 times [2021-12-16 00:59:21,610 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:21,610 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1007210305] [2021-12-16 00:59:21,610 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:21,610 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:21,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:21,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:21,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:21,704 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:21,704 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:21,704 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1007210305] [2021-12-16 00:59:21,704 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1007210305] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:21,704 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:21,705 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:21,705 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1151241220] [2021-12-16 00:59:21,705 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:21,705 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:21,705 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:21,706 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:21,708 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:21,708 INFO L87 Difference]: Start difference. First operand 75 states and 97 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:21,808 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:21,809 INFO L93 Difference]: Finished difference Result 142 states and 187 transitions. [2021-12-16 00:59:21,809 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 00:59:21,809 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2021-12-16 00:59:21,810 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:21,810 INFO L225 Difference]: With dead ends: 142 [2021-12-16 00:59:21,810 INFO L226 Difference]: Without dead ends: 75 [2021-12-16 00:59:21,811 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-16 00:59:21,812 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 125 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:21,812 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [125 Valid, 206 Invalid, 51 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:21,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2021-12-16 00:59:21,818 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2021-12-16 00:59:21,822 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-16 00:59:21,823 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 96 transitions. [2021-12-16 00:59:21,825 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 96 transitions. Word has length 30 [2021-12-16 00:59:21,825 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:21,825 INFO L470 AbstractCegarLoop]: Abstraction has 75 states and 96 transitions. [2021-12-16 00:59:21,825 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:21,825 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2021-12-16 00:59:21,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2021-12-16 00:59:21,828 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:21,828 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:21,828 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 00:59:21,828 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:21,829 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:21,829 INFO L85 PathProgramCache]: Analyzing trace with hash -1006789740, now seen corresponding path program 1 times [2021-12-16 00:59:21,829 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:21,830 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1539479554] [2021-12-16 00:59:21,830 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:21,830 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:21,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:21,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:21,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:21,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:21,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:21,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-16 00:59:21,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:21,916 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:21,916 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:21,916 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1539479554] [2021-12-16 00:59:21,917 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1539479554] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:21,917 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:21,917 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 00:59:21,917 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1903585950] [2021-12-16 00:59:21,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:21,917 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 00:59:21,919 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:21,919 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 00:59:21,919 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 00:59:21,919 INFO L87 Difference]: Start difference. First operand 75 states and 96 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-16 00:59:22,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:22,071 INFO L93 Difference]: Finished difference Result 217 states and 279 transitions. [2021-12-16 00:59:22,072 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:59:22,072 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 40 [2021-12-16 00:59:22,072 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:22,073 INFO L225 Difference]: With dead ends: 217 [2021-12-16 00:59:22,073 INFO L226 Difference]: Without dead ends: 150 [2021-12-16 00:59:22,074 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-16 00:59:22,075 INFO L933 BasicCegarLoop]: 130 mSDtfsCounter, 179 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 91 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 181 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 137 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 91 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:22,076 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [181 Valid, 306 Invalid, 137 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 91 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:22,076 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2021-12-16 00:59:22,089 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 144. [2021-12-16 00:59:22,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 112 states have (on average 1.2857142857142858) internal successors, (144), 120 states have internal predecessors, (144), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2021-12-16 00:59:22,094 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 179 transitions. [2021-12-16 00:59:22,094 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 179 transitions. Word has length 40 [2021-12-16 00:59:22,097 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:22,097 INFO L470 AbstractCegarLoop]: Abstraction has 144 states and 179 transitions. [2021-12-16 00:59:22,098 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-16 00:59:22,098 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 179 transitions. [2021-12-16 00:59:22,099 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-16 00:59:22,099 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:22,099 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:22,099 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 00:59:22,099 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:22,100 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:22,100 INFO L85 PathProgramCache]: Analyzing trace with hash -251696612, now seen corresponding path program 1 times [2021-12-16 00:59:22,100 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:22,101 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2092471143] [2021-12-16 00:59:22,101 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:22,101 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:22,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:22,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:22,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-12-16 00:59:22,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,162 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:22,162 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:22,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2092471143] [2021-12-16 00:59:22,162 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2092471143] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:22,163 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:22,163 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:59:22,163 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [340999618] [2021-12-16 00:59:22,163 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:22,163 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:22,164 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:22,164 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:22,164 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:22,164 INFO L87 Difference]: Start difference. First operand 144 states and 179 transitions. Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 00:59:22,355 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:22,356 INFO L93 Difference]: Finished difference Result 416 states and 525 transitions. [2021-12-16 00:59:22,356 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-16 00:59:22,356 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2021-12-16 00:59:22,357 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:22,361 INFO L225 Difference]: With dead ends: 416 [2021-12-16 00:59:22,362 INFO L226 Difference]: Without dead ends: 280 [2021-12-16 00:59:22,365 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-16 00:59:22,366 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 154 mSDsluCounter, 358 mSDsCounter, 0 mSdLazyCounter, 177 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 454 SdHoareTripleChecker+Invalid, 222 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 177 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:22,366 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [161 Valid, 454 Invalid, 222 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 177 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:22,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 280 states. [2021-12-16 00:59:22,390 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 280 to 266. [2021-12-16 00:59:22,393 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 203 states have (on average 1.2463054187192117) internal successors, (253), 218 states have internal predecessors, (253), 30 states have call successors, (30), 26 states have call predecessors, (30), 32 states have return successors, (42), 32 states have call predecessors, (42), 30 states have call successors, (42) [2021-12-16 00:59:22,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 325 transitions. [2021-12-16 00:59:22,395 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 325 transitions. Word has length 46 [2021-12-16 00:59:22,396 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:22,396 INFO L470 AbstractCegarLoop]: Abstraction has 266 states and 325 transitions. [2021-12-16 00:59:22,396 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 00:59:22,396 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 325 transitions. [2021-12-16 00:59:22,397 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-12-16 00:59:22,397 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:22,398 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:22,398 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 00:59:22,398 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:22,398 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:22,398 INFO L85 PathProgramCache]: Analyzing trace with hash 285200024, now seen corresponding path program 1 times [2021-12-16 00:59:22,398 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:22,399 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773277338] [2021-12-16 00:59:22,399 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:22,399 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:22,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:22,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:22,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:22,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-16 00:59:22,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,497 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:22,497 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:22,497 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773277338] [2021-12-16 00:59:22,498 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [773277338] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:22,498 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:22,498 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:59:22,498 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1823858872] [2021-12-16 00:59:22,498 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:22,499 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:22,500 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:22,500 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:22,501 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:22,501 INFO L87 Difference]: Start difference. First operand 266 states and 325 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-16 00:59:22,769 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:22,770 INFO L93 Difference]: Finished difference Result 536 states and 656 transitions. [2021-12-16 00:59:22,770 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-16 00:59:22,770 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 50 [2021-12-16 00:59:22,771 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:22,772 INFO L225 Difference]: With dead ends: 536 [2021-12-16 00:59:22,772 INFO L226 Difference]: Without dead ends: 278 [2021-12-16 00:59:22,773 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2021-12-16 00:59:22,774 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 176 mSDsluCounter, 142 mSDsCounter, 0 mSdLazyCounter, 338 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 178 SdHoareTripleChecker+Valid, 250 SdHoareTripleChecker+Invalid, 394 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 338 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:22,774 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [178 Valid, 250 Invalid, 394 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 338 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:22,774 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2021-12-16 00:59:22,800 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 264. [2021-12-16 00:59:22,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 201 states have (on average 1.228855721393035) internal successors, (247), 216 states have internal predecessors, (247), 30 states have call successors, (30), 26 states have call predecessors, (30), 32 states have return successors, (42), 32 states have call predecessors, (42), 30 states have call successors, (42) [2021-12-16 00:59:22,803 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 319 transitions. [2021-12-16 00:59:22,803 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 319 transitions. Word has length 50 [2021-12-16 00:59:22,805 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:22,805 INFO L470 AbstractCegarLoop]: Abstraction has 264 states and 319 transitions. [2021-12-16 00:59:22,805 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-16 00:59:22,805 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 319 transitions. [2021-12-16 00:59:22,809 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-16 00:59:22,809 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:22,809 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:22,809 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-16 00:59:22,809 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:22,809 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:22,809 INFO L85 PathProgramCache]: Analyzing trace with hash 1652612629, now seen corresponding path program 1 times [2021-12-16 00:59:22,810 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:22,810 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [326874487] [2021-12-16 00:59:22,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:22,810 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:22,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:22,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:22,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:22,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-16 00:59:22,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:22,884 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:22,884 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:22,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [326874487] [2021-12-16 00:59:22,884 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [326874487] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:22,884 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:22,884 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:59:22,884 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1702303026] [2021-12-16 00:59:22,885 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:22,885 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:22,885 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:22,885 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:22,885 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:22,886 INFO L87 Difference]: Start difference. First operand 264 states and 319 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:59:23,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:23,076 INFO L93 Difference]: Finished difference Result 538 states and 663 transitions. [2021-12-16 00:59:23,076 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 00:59:23,076 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2021-12-16 00:59:23,077 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:23,079 INFO L225 Difference]: With dead ends: 538 [2021-12-16 00:59:23,079 INFO L226 Difference]: Without dead ends: 282 [2021-12-16 00:59:23,079 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:59:23,081 INFO L933 BasicCegarLoop]: 89 mSDtfsCounter, 129 mSDsluCounter, 144 mSDsCounter, 0 mSdLazyCounter, 275 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 321 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 275 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:23,081 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [130 Valid, 233 Invalid, 321 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 275 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:23,084 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2021-12-16 00:59:23,101 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 270. [2021-12-16 00:59:23,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 270 states, 207 states have (on average 1.2222222222222223) internal successors, (253), 222 states have internal predecessors, (253), 30 states have call successors, (30), 26 states have call predecessors, (30), 32 states have return successors, (42), 32 states have call predecessors, (42), 30 states have call successors, (42) [2021-12-16 00:59:23,103 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 270 states to 270 states and 325 transitions. [2021-12-16 00:59:23,103 INFO L78 Accepts]: Start accepts. Automaton has 270 states and 325 transitions. Word has length 56 [2021-12-16 00:59:23,104 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:23,104 INFO L470 AbstractCegarLoop]: Abstraction has 270 states and 325 transitions. [2021-12-16 00:59:23,104 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:59:23,104 INFO L276 IsEmpty]: Start isEmpty. Operand 270 states and 325 transitions. [2021-12-16 00:59:23,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-16 00:59:23,108 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:23,108 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:23,108 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-16 00:59:23,109 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:23,109 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:23,109 INFO L85 PathProgramCache]: Analyzing trace with hash -719126633, now seen corresponding path program 1 times [2021-12-16 00:59:23,109 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:23,109 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [905233808] [2021-12-16 00:59:23,109 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:23,109 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:23,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:23,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:23,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:23,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-16 00:59:23,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,185 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:23,185 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:23,185 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [905233808] [2021-12-16 00:59:23,185 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [905233808] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:23,185 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:23,185 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:23,185 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2118557045] [2021-12-16 00:59:23,185 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:23,186 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:23,186 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:23,186 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:23,186 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:23,186 INFO L87 Difference]: Start difference. First operand 270 states and 325 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:59:23,337 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:23,337 INFO L93 Difference]: Finished difference Result 550 states and 675 transitions. [2021-12-16 00:59:23,337 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:59:23,337 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2021-12-16 00:59:23,338 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:23,339 INFO L225 Difference]: With dead ends: 550 [2021-12-16 00:59:23,339 INFO L226 Difference]: Without dead ends: 288 [2021-12-16 00:59:23,340 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-16 00:59:23,342 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 130 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 204 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 201 SdHoareTripleChecker+Invalid, 243 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 204 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:23,342 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [131 Valid, 201 Invalid, 243 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 204 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:23,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 288 states. [2021-12-16 00:59:23,355 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 288 to 274. [2021-12-16 00:59:23,356 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 274 states, 211 states have (on average 1.2180094786729858) internal successors, (257), 226 states have internal predecessors, (257), 30 states have call successors, (30), 26 states have call predecessors, (30), 32 states have return successors, (42), 32 states have call predecessors, (42), 30 states have call successors, (42) [2021-12-16 00:59:23,357 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 329 transitions. [2021-12-16 00:59:23,358 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 329 transitions. Word has length 56 [2021-12-16 00:59:23,358 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:23,360 INFO L470 AbstractCegarLoop]: Abstraction has 274 states and 329 transitions. [2021-12-16 00:59:23,360 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:59:23,361 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 329 transitions. [2021-12-16 00:59:23,361 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-16 00:59:23,361 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:23,361 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:23,362 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-16 00:59:23,362 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:23,362 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:23,362 INFO L85 PathProgramCache]: Analyzing trace with hash 667076761, now seen corresponding path program 1 times [2021-12-16 00:59:23,362 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:23,362 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1625193569] [2021-12-16 00:59:23,362 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:23,363 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:23,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:23,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:23,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:23,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-16 00:59:23,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,450 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:23,451 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:23,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1625193569] [2021-12-16 00:59:23,451 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1625193569] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:23,451 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:23,451 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:23,451 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [718476896] [2021-12-16 00:59:23,451 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:23,452 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:23,452 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:23,452 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:23,452 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:23,453 INFO L87 Difference]: Start difference. First operand 274 states and 329 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 00:59:23,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:23,688 INFO L93 Difference]: Finished difference Result 762 states and 965 transitions. [2021-12-16 00:59:23,688 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-16 00:59:23,688 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-12-16 00:59:23,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:23,691 INFO L225 Difference]: With dead ends: 762 [2021-12-16 00:59:23,691 INFO L226 Difference]: Without dead ends: 496 [2021-12-16 00:59:23,692 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:59:23,692 INFO L933 BasicCegarLoop]: 134 mSDtfsCounter, 285 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 256 mSolverCounterSat, 115 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 287 SdHoareTripleChecker+Valid, 250 SdHoareTripleChecker+Invalid, 371 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 115 IncrementalHoareTripleChecker+Valid, 256 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:23,693 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [287 Valid, 250 Invalid, 371 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [115 Valid, 256 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:23,693 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 496 states. [2021-12-16 00:59:23,709 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 496 to 494. [2021-12-16 00:59:23,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 494 states, 375 states have (on average 1.2053333333333334) internal successors, (452), 398 states have internal predecessors, (452), 60 states have call successors, (60), 56 states have call predecessors, (60), 58 states have return successors, (95), 60 states have call predecessors, (95), 60 states have call successors, (95) [2021-12-16 00:59:23,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 494 states to 494 states and 607 transitions. [2021-12-16 00:59:23,712 INFO L78 Accepts]: Start accepts. Automaton has 494 states and 607 transitions. Word has length 56 [2021-12-16 00:59:23,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:23,713 INFO L470 AbstractCegarLoop]: Abstraction has 494 states and 607 transitions. [2021-12-16 00:59:23,713 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 00:59:23,713 INFO L276 IsEmpty]: Start isEmpty. Operand 494 states and 607 transitions. [2021-12-16 00:59:23,714 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-16 00:59:23,714 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:23,714 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:23,714 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-16 00:59:23,714 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:23,715 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:23,715 INFO L85 PathProgramCache]: Analyzing trace with hash -295766221, now seen corresponding path program 1 times [2021-12-16 00:59:23,715 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:23,715 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [118379921] [2021-12-16 00:59:23,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:23,715 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:23,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:23,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 00:59:23,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 00:59:23,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:23,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-16 00:59:23,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,825 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-16 00:59:23,825 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:23,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [118379921] [2021-12-16 00:59:23,825 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [118379921] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:23,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1909947893] [2021-12-16 00:59:23,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:23,825 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:23,825 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:23,827 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:23,829 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 00:59:23,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:23,899 INFO L263 TraceCheckSpWp]: Trace formula consists of 384 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-16 00:59:23,903 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:24,108 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:24,108 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:59:24,109 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1909947893] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:24,109 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:59:24,109 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2021-12-16 00:59:24,109 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1742502511] [2021-12-16 00:59:24,109 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:24,109 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:24,109 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:24,109 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:24,109 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=264, Unknown=0, NotChecked=0, Total=306 [2021-12-16 00:59:24,110 INFO L87 Difference]: Start difference. First operand 494 states and 607 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-16 00:59:24,185 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:24,185 INFO L93 Difference]: Finished difference Result 958 states and 1182 transitions. [2021-12-16 00:59:24,185 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:59:24,185 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2021-12-16 00:59:24,185 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:24,187 INFO L225 Difference]: With dead ends: 958 [2021-12-16 00:59:24,187 INFO L226 Difference]: Without dead ends: 472 [2021-12-16 00:59:24,188 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2021-12-16 00:59:24,189 INFO L933 BasicCegarLoop]: 169 mSDtfsCounter, 67 mSDsluCounter, 576 mSDsCounter, 0 mSdLazyCounter, 114 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 745 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 114 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:24,189 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [69 Valid, 745 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:24,189 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 472 states. [2021-12-16 00:59:24,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 472 to 470. [2021-12-16 00:59:24,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 470 states, 356 states have (on average 1.1882022471910112) internal successors, (423), 378 states have internal predecessors, (423), 58 states have call successors, (58), 54 states have call predecessors, (58), 55 states have return successors, (82), 57 states have call predecessors, (82), 58 states have call successors, (82) [2021-12-16 00:59:24,205 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 470 states to 470 states and 563 transitions. [2021-12-16 00:59:24,206 INFO L78 Accepts]: Start accepts. Automaton has 470 states and 563 transitions. Word has length 60 [2021-12-16 00:59:24,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:24,206 INFO L470 AbstractCegarLoop]: Abstraction has 470 states and 563 transitions. [2021-12-16 00:59:24,206 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-16 00:59:24,206 INFO L276 IsEmpty]: Start isEmpty. Operand 470 states and 563 transitions. [2021-12-16 00:59:24,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-12-16 00:59:24,207 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:24,207 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:24,234 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-16 00:59:24,424 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-16 00:59:24,425 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:24,425 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:24,425 INFO L85 PathProgramCache]: Analyzing trace with hash -738171045, now seen corresponding path program 1 times [2021-12-16 00:59:24,425 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:24,425 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1925719915] [2021-12-16 00:59:24,425 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:24,426 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:24,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:24,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:24,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:59:24,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:24,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:24,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-16 00:59:24,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-16 00:59:24,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:24,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-16 00:59:24,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,501 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-16 00:59:24,501 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:24,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1925719915] [2021-12-16 00:59:24,502 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1925719915] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:24,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1992868910] [2021-12-16 00:59:24,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:24,502 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:24,502 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:24,503 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:24,517 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-16 00:59:24,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:24,600 INFO L263 TraceCheckSpWp]: Trace formula consists of 481 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-16 00:59:24,602 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:24,730 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:24,730 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:59:24,730 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1992868910] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:24,730 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:59:24,730 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2021-12-16 00:59:24,730 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1663247299] [2021-12-16 00:59:24,731 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:24,731 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:59:24,731 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:24,732 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:59:24,732 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:24,732 INFO L87 Difference]: Start difference. First operand 470 states and 563 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-16 00:59:24,763 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:24,763 INFO L93 Difference]: Finished difference Result 714 states and 867 transitions. [2021-12-16 00:59:24,763 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:59:24,764 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2021-12-16 00:59:24,764 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:24,767 INFO L225 Difference]: With dead ends: 714 [2021-12-16 00:59:24,767 INFO L226 Difference]: Without dead ends: 712 [2021-12-16 00:59:24,767 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:24,768 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 45 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:24,768 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [45 Valid, 188 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:24,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 712 states. [2021-12-16 00:59:24,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 712 to 526. [2021-12-16 00:59:24,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 526 states, 400 states have (on average 1.205) internal successors, (482), 423 states have internal predecessors, (482), 64 states have call successors, (64), 60 states have call predecessors, (64), 61 states have return successors, (98), 63 states have call predecessors, (98), 64 states have call successors, (98) [2021-12-16 00:59:24,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 526 states to 526 states and 644 transitions. [2021-12-16 00:59:24,789 INFO L78 Accepts]: Start accepts. Automaton has 526 states and 644 transitions. Word has length 98 [2021-12-16 00:59:24,789 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:24,789 INFO L470 AbstractCegarLoop]: Abstraction has 526 states and 644 transitions. [2021-12-16 00:59:24,790 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-16 00:59:24,790 INFO L276 IsEmpty]: Start isEmpty. Operand 526 states and 644 transitions. [2021-12-16 00:59:24,791 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2021-12-16 00:59:24,792 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:24,792 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:24,811 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-16 00:59:25,007 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-16 00:59:25,008 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:25,008 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:25,008 INFO L85 PathProgramCache]: Analyzing trace with hash -784141340, now seen corresponding path program 1 times [2021-12-16 00:59:25,008 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:25,008 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [827503613] [2021-12-16 00:59:25,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:25,008 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:25,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:25,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:25,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:59:25,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:25,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:25,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-16 00:59:25,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-16 00:59:25,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 00:59:25,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:25,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:25,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-16 00:59:25,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:25,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-16 00:59:25,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,157 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 56 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2021-12-16 00:59:25,157 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:25,157 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [827503613] [2021-12-16 00:59:25,157 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [827503613] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:25,158 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [556491048] [2021-12-16 00:59:25,158 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:25,158 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:25,158 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:25,159 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:25,167 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-16 00:59:25,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:25,286 INFO L263 TraceCheckSpWp]: Trace formula consists of 588 conjuncts, 11 conjunts are in the unsatisfiable core [2021-12-16 00:59:25,290 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:25,650 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 79 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:25,651 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 00:59:25,972 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 57 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2021-12-16 00:59:25,973 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [556491048] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 00:59:25,973 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 00:59:25,973 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 20 [2021-12-16 00:59:25,973 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [266910747] [2021-12-16 00:59:25,973 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 00:59:25,973 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-12-16 00:59:25,973 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:25,974 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-12-16 00:59:25,974 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=305, Unknown=0, NotChecked=0, Total=380 [2021-12-16 00:59:25,974 INFO L87 Difference]: Start difference. First operand 526 states and 644 transitions. Second operand has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2021-12-16 00:59:27,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:27,578 INFO L93 Difference]: Finished difference Result 1823 states and 2672 transitions. [2021-12-16 00:59:27,578 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2021-12-16 00:59:27,579 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 139 [2021-12-16 00:59:27,579 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:27,585 INFO L225 Difference]: With dead ends: 1823 [2021-12-16 00:59:27,585 INFO L226 Difference]: Without dead ends: 1395 [2021-12-16 00:59:27,588 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 352 GetRequests, 300 SyntacticMatches, 5 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 527 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=593, Invalid=1759, Unknown=0, NotChecked=0, Total=2352 [2021-12-16 00:59:27,588 INFO L933 BasicCegarLoop]: 242 mSDtfsCounter, 1050 mSDsluCounter, 761 mSDsCounter, 0 mSdLazyCounter, 1903 mSolverCounterSat, 536 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1061 SdHoareTripleChecker+Valid, 1003 SdHoareTripleChecker+Invalid, 2439 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 536 IncrementalHoareTripleChecker+Valid, 1903 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:27,588 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1061 Valid, 1003 Invalid, 2439 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [536 Valid, 1903 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2021-12-16 00:59:27,589 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1395 states. [2021-12-16 00:59:27,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1395 to 952. [2021-12-16 00:59:27,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 952 states, 727 states have (on average 1.18707015130674) internal successors, (863), 768 states have internal predecessors, (863), 114 states have call successors, (114), 100 states have call predecessors, (114), 110 states have return successors, (180), 108 states have call predecessors, (180), 114 states have call successors, (180) [2021-12-16 00:59:27,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 952 states to 952 states and 1157 transitions. [2021-12-16 00:59:27,638 INFO L78 Accepts]: Start accepts. Automaton has 952 states and 1157 transitions. Word has length 139 [2021-12-16 00:59:27,638 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:27,639 INFO L470 AbstractCegarLoop]: Abstraction has 952 states and 1157 transitions. [2021-12-16 00:59:27,639 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2021-12-16 00:59:27,639 INFO L276 IsEmpty]: Start isEmpty. Operand 952 states and 1157 transitions. [2021-12-16 00:59:27,642 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2021-12-16 00:59:27,643 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:27,643 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:27,664 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-16 00:59:27,861 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:27,861 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:27,862 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:27,862 INFO L85 PathProgramCache]: Analyzing trace with hash -979242294, now seen corresponding path program 1 times [2021-12-16 00:59:27,862 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:27,862 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1977597345] [2021-12-16 00:59:27,862 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:27,862 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:27,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:27,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:27,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:59:27,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:27,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:27,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-16 00:59:27,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-16 00:59:27,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-16 00:59:27,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:27,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:27,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 104 [2021-12-16 00:59:27,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-12-16 00:59:27,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:27,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2021-12-16 00:59:27,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,963 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 45 proven. 0 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2021-12-16 00:59:27,963 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:27,963 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1977597345] [2021-12-16 00:59:27,963 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1977597345] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:27,963 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:27,963 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-12-16 00:59:27,965 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1612502651] [2021-12-16 00:59:27,965 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:27,965 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-12-16 00:59:27,966 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:27,966 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-12-16 00:59:27,966 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2021-12-16 00:59:27,966 INFO L87 Difference]: Start difference. First operand 952 states and 1157 transitions. Second operand has 9 states, 9 states have (on average 9.777777777777779) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (11), 6 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-16 00:59:28,217 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:28,217 INFO L93 Difference]: Finished difference Result 1315 states and 1576 transitions. [2021-12-16 00:59:28,217 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-16 00:59:28,218 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.777777777777779) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (11), 6 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) Word has length 143 [2021-12-16 00:59:28,218 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:28,218 INFO L225 Difference]: With dead ends: 1315 [2021-12-16 00:59:28,218 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 00:59:28,220 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=72, Invalid=200, Unknown=0, NotChecked=0, Total=272 [2021-12-16 00:59:28,221 INFO L933 BasicCegarLoop]: 86 mSDtfsCounter, 171 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 377 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 278 SdHoareTripleChecker+Invalid, 430 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 377 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:28,221 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [172 Valid, 278 Invalid, 430 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 377 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:28,221 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 00:59:28,221 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 00:59:28,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 00:59:28,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 00:59:28,222 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 143 [2021-12-16 00:59:28,222 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:28,222 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 00:59:28,222 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.777777777777779) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (11), 6 states have call predecessors, (11), 2 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11) [2021-12-16 00:59:28,222 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 00:59:28,223 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 00:59:28,224 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 00:59:28,225 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-12-16 00:59:28,226 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 00:59:32,430 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 370 376) no Hoare annotation was computed. [2021-12-16 00:59:32,430 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 370 376) the Hoare annotation is: true [2021-12-16 00:59:32,430 INFO L858 garLoopResultBuilder]: For program point L126-1(lines 122 133) no Hoare annotation was computed. [2021-12-16 00:59:32,430 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 122 133) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse1 (not (= ~methAndRunningLastTime~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|) (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse1 .cse2) (or .cse3 .cse0 .cse4 .cse1 .cse2) (or .cse3 .cse4 .cse1 .cse2 (not (<= 2 ~waterLevel~0))))) [2021-12-16 00:59:32,430 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 122 133) no Hoare annotation was computed. [2021-12-16 00:59:32,430 INFO L858 garLoopResultBuilder]: For program point L547-2(lines 547 551) no Hoare annotation was computed. [2021-12-16 00:59:32,430 INFO L858 garLoopResultBuilder]: For program point L993(line 993) no Hoare annotation was computed. [2021-12-16 00:59:32,430 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 346 369) no Hoare annotation was computed. [2021-12-16 00:59:32,430 INFO L858 garLoopResultBuilder]: For program point L102(lines 102 106) no Hoare annotation was computed. [2021-12-16 00:59:32,430 INFO L854 garLoopResultBuilder]: At program point L102-2(lines 98 109) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse2 (not (= ~systemActive~0 1))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 (and (not (= 0 |old(~pumpRunning~0)|)) .cse5 .cse6) .cse7 .cse2) (or .cse1 .cse7 .cse2 .cse3) (or .cse4 .cse0 (and .cse5 (= ~methAndRunningLastTime~0 0) .cse6) .cse2 .cse3))) [2021-12-16 00:59:32,431 INFO L854 garLoopResultBuilder]: At program point L994(lines 989 996) the Hoare annotation is: (let ((.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse2) (or .cse4 .cse0 .cse2 .cse3) (or .cse1 .cse5 .cse2 .cse3))) [2021-12-16 00:59:32,431 INFO L858 garLoopResultBuilder]: For program point L350-1(lines 349 368) no Hoare annotation was computed. [2021-12-16 00:59:32,431 INFO L854 garLoopResultBuilder]: At program point L317(line 317) the Hoare annotation is: (let ((.cse19 (= 0 ~waterLevel~0))) (let ((.cse18 (not .cse19)) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse17 (= ~systemActive~0 1)) (.cse20 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not .cse20)) (.cse9 (and .cse20 .cse1 (<= 2 ~waterLevel~0) .cse17)) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse19) (and .cse18 (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)))) (.cse12 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse13 (or (and .cse18 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (and .cse19 (= |timeShift_isLowWaterSensorDry_#res#1| 1)))) (.cse14 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse15 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse16 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse7 (= ~pumpRunning~0 0)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not .cse17)) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or (and .cse0 .cse1 .cse7) .cse4 .cse8 .cse9 .cse5 .cse6) (or .cse10 (and .cse11 .cse12 (not (= 0 |old(~pumpRunning~0)|)) .cse13 .cse14 .cse15 .cse16 .cse7) .cse8 .cse5 .cse9) (or .cse10 (and .cse2 .cse7) (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse7) .cse3 .cse5 .cse6))))) [2021-12-16 00:59:32,431 INFO L858 garLoopResultBuilder]: For program point L412(lines 412 420) no Hoare annotation was computed. [2021-12-16 00:59:32,431 INFO L858 garLoopResultBuilder]: For program point L317-1(line 317) no Hoare annotation was computed. [2021-12-16 00:59:32,431 INFO L858 garLoopResultBuilder]: For program point L408(lines 408 425) no Hoare annotation was computed. [2021-12-16 00:59:32,431 INFO L854 garLoopResultBuilder]: At program point L553(lines 538 556) the Hoare annotation is: (let ((.cse13 (= 0 ~waterLevel~0))) (let ((.cse12 (not .cse13))) (let ((.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse13) (and .cse12 (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)))) (.cse2 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse3 (or (and .cse12 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (and .cse13 (= |timeShift_isLowWaterSensorDry_#res#1| 1)))) (.cse4 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= ~systemActive~0 1))) (.cse11 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 (and .cse1 .cse2 (not (= 0 |old(~pumpRunning~0)|)) .cse3 .cse4 .cse5 .cse6) .cse7 .cse8) (or .cse9 .cse10 .cse8 .cse11) (or .cse0 .cse9 (and .cse1 .cse2 .cse3 .cse4 .cse5 (= ~methAndRunningLastTime~0 0) .cse6) .cse8 .cse11) (or .cse10 .cse7 .cse8 .cse11))))) [2021-12-16 00:59:32,432 INFO L854 garLoopResultBuilder]: At program point L194(lines 189 197) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (let ((.cse9 (= 0 ~waterLevel~0))) (or (and (not .cse9) (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (and .cse9 (= |timeShift_isLowWaterSensorDry_#res#1| 1))))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 (and .cse5 .cse6 (= ~methAndRunningLastTime~0 0) .cse7) .cse2 .cse3) (or .cse1 .cse8 .cse2 .cse3) (or .cse4 (and (not (= 0 |old(~pumpRunning~0)|)) .cse5 .cse6 .cse7) .cse8 .cse2))) [2021-12-16 00:59:32,432 INFO L854 garLoopResultBuilder]: At program point L479(lines 474 482) the Hoare annotation is: (let ((.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~systemActive~0 1))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 (and .cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse3 (and (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0) .cse2) .cse4 .cse5) (or .cse0 .cse6 .cse4) (or .cse7 .cse6 .cse4 .cse5) (or (and .cse1 (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|) (= ~waterLevel~0 |old(~waterLevel~0)|) .cse2) .cse3 .cse7 .cse4 .cse5))) [2021-12-16 00:59:32,432 INFO L858 garLoopResultBuilder]: For program point L323(lines 323 333) no Hoare annotation was computed. [2021-12-16 00:59:32,432 INFO L854 garLoopResultBuilder]: At program point L418(line 418) the Hoare annotation is: (let ((.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse2) (or .cse4 .cse0 .cse2 .cse3) (or .cse1 .cse5 .cse2 .cse3))) [2021-12-16 00:59:32,432 INFO L858 garLoopResultBuilder]: For program point L319(lines 319 336) no Hoare annotation was computed. [2021-12-16 00:59:32,432 INFO L854 garLoopResultBuilder]: At program point L319-1(lines 311 339) the Hoare annotation is: (let ((.cse21 (= 0 ~waterLevel~0))) (let ((.cse20 (not .cse21)) (.cse0 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse19 (= ~methaneLevelCritical~0 0)) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse18 (= ~systemActive~0 1))) (let ((.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (and .cse0 .cse19 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse18)) (.cse11 (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse21) (and .cse20 (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)))) (.cse12 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse13 (or (and .cse20 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (and .cse21 (= |timeShift_isLowWaterSensorDry_#res#1| 1)))) (.cse14 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse15 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse16 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse6 (not .cse19)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse17 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not .cse18)) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or (and .cse0 .cse1 .cse2 .cse3) .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse9 (and .cse10 .cse3) (and .cse11 .cse12 .cse13 .cse14 .cse2 .cse15 .cse16 .cse3) .cse17 .cse7 .cse8) (or .cse9 .cse4 (and .cse11 .cse12 .cse0 (not (= 0 |old(~pumpRunning~0)|)) .cse13 .cse14 .cse2 .cse15 .cse16 .cse3) .cse6 .cse7) (or (and .cse1 .cse10 .cse2 .cse3) .cse17 .cse5 .cse7 .cse8))))) [2021-12-16 00:59:32,432 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 346 369) the Hoare annotation is: (let ((.cse6 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse8 (= ~methAndRunningLastTime~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and .cse6 .cse8 (= ~pumpRunning~0 0))) (.cse3 (not (= ~systemActive~0 1))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 (and (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|) .cse6 .cse7) .cse1 .cse3) (or .cse5 (and .cse6 .cse7 .cse8) .cse9 .cse3 .cse4) (or .cse9 .cse0 .cse2 .cse3 .cse4)))) [2021-12-16 00:59:32,433 INFO L854 garLoopResultBuilder]: At program point L460(lines 455 462) the Hoare annotation is: (let ((.cse14 (= 0 ~waterLevel~0))) (let ((.cse13 (not .cse14))) (let ((.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse14) (and .cse13 (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)))) (.cse2 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse3 (or (and .cse13 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (and .cse14 (= |timeShift_isLowWaterSensorDry_#res#1| 1)))) (.cse4 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse5 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse6 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse7 (= ~pumpRunning~0 0)) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= ~systemActive~0 1))) (.cse12 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 (and .cse1 .cse2 (not (= 0 |old(~pumpRunning~0)|)) .cse3 .cse4 .cse5 .cse6 .cse7) .cse8 .cse9) (or .cse10 .cse11 .cse9 .cse12) (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) .cse10 .cse9 .cse12) (or .cse11 .cse8 .cse9 .cse12))))) [2021-12-16 00:59:32,433 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 346 369) no Hoare annotation was computed. [2021-12-16 00:59:32,433 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 993) no Hoare annotation was computed. [2021-12-16 00:59:32,433 INFO L854 garLoopResultBuilder]: At program point L423(line 423) the Hoare annotation is: (let ((.cse0 (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|)) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= ~pumpRunning~0 0)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= ~systemActive~0 1))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse7 (and .cse0 .cse1 .cse2 .cse8) .cse9 .cse5) (or (and .cse0 .cse1 .cse8) .cse4 .cse9 .cse5 .cse6) (or .cse7 (and .cse2 .cse8) .cse3 .cse5 .cse6))) [2021-12-16 00:59:32,433 INFO L854 garLoopResultBuilder]: At program point L423-1(lines 404 428) the Hoare annotation is: (let ((.cse19 (= 0 ~waterLevel~0))) (let ((.cse18 (not .cse19)) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse17 (= ~systemActive~0 1)) (.cse20 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not .cse20)) (.cse9 (and .cse20 .cse1 (<= 2 ~waterLevel~0) .cse17)) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse19) (and .cse18 (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)))) (.cse12 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse13 (or (and .cse18 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (and .cse19 (= |timeShift_isLowWaterSensorDry_#res#1| 1)))) (.cse14 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse15 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse16 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse7 (= ~pumpRunning~0 0)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not .cse17)) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or (and .cse0 .cse1 .cse7) .cse4 .cse8 .cse9 .cse5 .cse6) (or .cse10 (and .cse11 .cse12 (not (= 0 |old(~pumpRunning~0)|)) .cse13 .cse14 .cse15 .cse16 .cse7) .cse8 .cse5 .cse9) (or .cse10 (and .cse2 .cse7) (and .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse7) .cse3 .cse5 .cse6))))) [2021-12-16 00:59:32,433 INFO L858 garLoopResultBuilder]: For program point L357-1(lines 357 363) no Hoare annotation was computed. [2021-12-16 00:59:32,433 INFO L858 garLoopResultBuilder]: For program point L324(lines 324 330) no Hoare annotation was computed. [2021-12-16 00:59:32,433 INFO L858 garLoopResultBuilder]: For program point L547(lines 547 551) no Hoare annotation was computed. [2021-12-16 00:59:32,433 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 201 230) no Hoare annotation was computed. [2021-12-16 00:59:32,433 INFO L858 garLoopResultBuilder]: For program point L222(line 222) no Hoare annotation was computed. [2021-12-16 00:59:32,433 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 201 230) the Hoare annotation is: true [2021-12-16 00:59:32,434 INFO L858 garLoopResultBuilder]: For program point L215(lines 215 219) no Hoare annotation was computed. [2021-12-16 00:59:32,434 INFO L861 garLoopResultBuilder]: At program point L215-1(lines 215 219) the Hoare annotation is: true [2021-12-16 00:59:32,434 INFO L858 garLoopResultBuilder]: For program point L212(line 212) no Hoare annotation was computed. [2021-12-16 00:59:32,434 INFO L861 garLoopResultBuilder]: At program point L211-2(lines 211 225) the Hoare annotation is: true [2021-12-16 00:59:32,434 INFO L861 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: true [2021-12-16 00:59:32,434 INFO L858 garLoopResultBuilder]: For program point L207-1(line 207) no Hoare annotation was computed. [2021-12-16 00:59:32,434 INFO L861 garLoopResultBuilder]: At program point L226(lines 201 230) the Hoare annotation is: true [2021-12-16 00:59:32,434 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 134 142) the Hoare annotation is: true [2021-12-16 00:59:32,434 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 134 142) no Hoare annotation was computed. [2021-12-16 00:59:32,434 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 134 142) no Hoare annotation was computed. [2021-12-16 00:59:32,434 INFO L854 garLoopResultBuilder]: At program point L308(lines 303 310) the Hoare annotation is: (and (= ~systemActive~0 |ULTIMATE.start_main_~tmp~0#1|) (= ~systemActive~0 |ULTIMATE.start_valid_product_#res#1|) (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:32,434 INFO L854 garLoopResultBuilder]: At program point L614(lines 567 615) the Hoare annotation is: false [2021-12-16 00:59:32,434 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 00:59:32,434 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 00:59:32,434 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 00:59:32,434 INFO L858 garLoopResultBuilder]: For program point L569(lines 568 613) no Hoare annotation was computed. [2021-12-16 00:59:32,434 INFO L858 garLoopResultBuilder]: For program point L598(lines 598 609) no Hoare annotation was computed. [2021-12-16 00:59:32,435 INFO L854 garLoopResultBuilder]: At program point L590(line 590) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~0#1|)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse4 (= ~systemActive~0 1)) (.cse5 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~methaneLevelCritical~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 (<= 2 ~waterLevel~0) .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4 .cse5))) [2021-12-16 00:59:32,435 INFO L854 garLoopResultBuilder]: At program point L260(lines 256 262) the Hoare annotation is: (and (= ~systemActive~0 |ULTIMATE.start_main_~tmp~0#1|) (= ~systemActive~0 |ULTIMATE.start_valid_product_#res#1|) (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:32,435 INFO L854 garLoopResultBuilder]: At program point L611(lines 568 613) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~0#1|)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse4 (= ~systemActive~0 1)) (.cse5 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~methaneLevelCritical~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 (<= 2 ~waterLevel~0) .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4 .cse5))) [2021-12-16 00:59:32,435 INFO L858 garLoopResultBuilder]: For program point L578(lines 578 584) no Hoare annotation was computed. [2021-12-16 00:59:32,435 INFO L858 garLoopResultBuilder]: For program point L578-1(lines 578 584) no Hoare annotation was computed. [2021-12-16 00:59:32,435 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 00:59:32,435 INFO L858 garLoopResultBuilder]: For program point L570(lines 570 574) no Hoare annotation was computed. [2021-12-16 00:59:32,435 INFO L854 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~systemActive~0 |ULTIMATE.start_valid_product_#res#1|) (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:32,435 INFO L861 garLoopResultBuilder]: At program point L273(lines 265 275) the Hoare annotation is: true [2021-12-16 00:59:32,435 INFO L854 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:32,435 INFO L858 garLoopResultBuilder]: For program point L286(lines 286 293) no Hoare annotation was computed. [2021-12-16 00:59:32,435 INFO L858 garLoopResultBuilder]: For program point L604(lines 604 608) no Hoare annotation was computed. [2021-12-16 00:59:32,435 INFO L858 garLoopResultBuilder]: For program point L286-2(lines 286 293) no Hoare annotation was computed. [2021-12-16 00:59:32,436 INFO L854 garLoopResultBuilder]: At program point L604-2(lines 598 609) the Hoare annotation is: (let ((.cse8 (<= 2 ~waterLevel~0)) (.cse4 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~0#1|)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~systemActive~0 1)) (.cse6 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse7 .cse8 .cse5) (and .cse0 .cse1 .cse2 .cse8 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse7 .cse3 .cse5 .cse6))) [2021-12-16 00:59:32,436 INFO L858 garLoopResultBuilder]: For program point L588(lines 588 594) no Hoare annotation was computed. [2021-12-16 00:59:32,436 INFO L858 garLoopResultBuilder]: For program point L588-1(lines 588 594) no Hoare annotation was computed. [2021-12-16 00:59:32,436 INFO L861 garLoopResultBuilder]: At program point L617(lines 558 621) the Hoare annotation is: true [2021-12-16 00:59:32,436 INFO L861 garLoopResultBuilder]: At program point L295(lines 276 298) the Hoare annotation is: true [2021-12-16 00:59:32,436 INFO L854 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:32,437 INFO L854 garLoopResultBuilder]: At program point L580(line 580) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 |ULTIMATE.start_valid_product_#res#1|)) (.cse2 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~0#1|)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse4 (= ~systemActive~0 1)) (.cse5 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~methaneLevelCritical~0) .cse4 .cse5) (and .cse0 .cse1 .cse2 .cse6 (<= 2 ~waterLevel~0) .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse6 .cse3 .cse4 .cse5))) [2021-12-16 00:59:32,437 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 378 402) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 0 ~waterLevel~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse5 .cse3) (or .cse5 .cse2 .cse3 (= ~pumpRunning~0 0)) (or .cse0 .cse4 .cse1 (not (= ~methAndRunningLastTime~0 0)) .cse3))) [2021-12-16 00:59:32,437 INFO L858 garLoopResultBuilder]: For program point L382(lines 382 399) no Hoare annotation was computed. [2021-12-16 00:59:32,438 INFO L854 garLoopResultBuilder]: At program point L184(lines 175 188) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 0 ~waterLevel~0))) (.cse1 (= 0 |old(~pumpRunning~0)|)) (.cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (.cse4 (<= 2 ~waterLevel~0)) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (let ((.cse5 (= ~pumpRunning~0 0))) (or (and .cse4 .cse5) (and .cse6 .cse5) .cse7 .cse2 .cse3)) (or .cse0 .cse8 (not (= ~methAndRunningLastTime~0 0)) .cse1 .cse3) (let ((.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse6 .cse9) (and .cse9 .cse4) .cse8 .cse7 .cse3)))) [2021-12-16 00:59:32,438 INFO L854 garLoopResultBuilder]: At program point L434(lines 429 436) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 0 ~waterLevel~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0)) .cse2) (or .cse1 .cse3 .cse2) (or .cse3 (<= 2 ~waterLevel~0) .cse4 .cse2) (or .cse0 .cse4 .cse2))) [2021-12-16 00:59:32,438 INFO L854 garLoopResultBuilder]: At program point L397(line 397) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= 0 ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse0 .cse2) (or .cse4 .cse5 .cse1 .cse2) (or .cse4 .cse3 .cse5 (not (= ~methAndRunningLastTime~0 0)) .cse2))) [2021-12-16 00:59:32,438 INFO L858 garLoopResultBuilder]: For program point L397-1(lines 378 402) no Hoare annotation was computed. [2021-12-16 00:59:32,438 INFO L858 garLoopResultBuilder]: For program point L445(lines 445 451) no Hoare annotation was computed. [2021-12-16 00:59:32,438 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 378 402) no Hoare annotation was computed. [2021-12-16 00:59:32,438 INFO L854 garLoopResultBuilder]: At program point L445-2(lines 438 454) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (<= 2 ~waterLevel~0)) (.cse4 (not (= 0 ~waterLevel~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~systemActive~0 1)))) (and (or .cse0 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) .cse1 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~4#1|) (= ~pumpRunning~0 0)) .cse2 .cse3) (or .cse4 .cse0 (not (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse2 .cse1 .cse5 .cse3) (or .cse4 .cse5 .cse3))) [2021-12-16 00:59:32,438 INFO L854 garLoopResultBuilder]: At program point L534(lines 519 537) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) .cse5)) (.cse4 (<= 2 ~waterLevel~0)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 0 ~waterLevel~0))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= 0 |old(~pumpRunning~0)|)) (.cse3 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (and .cse4 .cse5) .cse6 .cse7 .cse2 .cse3) (or .cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4) .cse8 .cse7 .cse3) (or .cse0 .cse8 (not (= ~methAndRunningLastTime~0 0)) .cse1 .cse3)))) [2021-12-16 00:59:32,438 INFO L854 garLoopResultBuilder]: At program point L470(lines 463 473) the Hoare annotation is: (let ((.cse3 (<= 2 ~waterLevel~0)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 0 ~waterLevel~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0)) .cse2) (or (and .cse3 (= ~pumpRunning~0 0)) .cse4 .cse5 .cse2) (or (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse1 .cse4 .cse2) (or .cse0 .cse5 .cse2))) [2021-12-16 00:59:32,438 INFO L854 garLoopResultBuilder]: At program point L468(line 468) the Hoare annotation is: (let ((.cse0 (not (= 0 ~waterLevel~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0)) .cse2) (or (and .cse3 (= ~pumpRunning~0 0)) .cse4 .cse5 .cse2) (or .cse0 .cse5 .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse1 .cse4 .cse2))) [2021-12-16 00:59:32,438 INFO L858 garLoopResultBuilder]: For program point L179(lines 179 185) no Hoare annotation was computed. [2021-12-16 00:59:32,439 INFO L858 garLoopResultBuilder]: For program point L468-1(line 468) no Hoare annotation was computed. [2021-12-16 00:59:32,439 INFO L858 garLoopResultBuilder]: For program point L528(lines 528 532) no Hoare annotation was computed. [2021-12-16 00:59:32,439 INFO L858 garLoopResultBuilder]: For program point L528-2(lines 528 532) no Hoare annotation was computed. [2021-12-16 00:59:32,439 INFO L854 garLoopResultBuilder]: At program point L392(line 392) the Hoare annotation is: (let ((.cse4 (not (= 0 ~waterLevel~0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (= 0 |old(~pumpRunning~0)|)) (.cse1 (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) (= ~pumpRunning~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse3) (or .cse4 .cse0 (not (= ~methAndRunningLastTime~0 0)) .cse5 .cse3) (or .cse1 .cse2 .cse6 .cse3))) [2021-12-16 00:59:32,439 INFO L858 garLoopResultBuilder]: For program point L386(lines 386 394) no Hoare annotation was computed. [2021-12-16 00:59:32,439 INFO L858 garLoopResultBuilder]: For program point L114-1(lines 110 121) no Hoare annotation was computed. [2021-12-16 00:59:32,439 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 110 121) no Hoare annotation was computed. [2021-12-16 00:59:32,439 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 110 121) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~systemActive~0 1)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2 .cse3) (or (not (<= 2 |old(~waterLevel~0)|)) .cse1 .cse2 .cse4 .cse3) (or .cse0 .cse1 .cse2 .cse4 .cse3))) [2021-12-16 00:59:32,441 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:32,442 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 00:59:32,486 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 12:59:32 BoogieIcfgContainer [2021-12-16 00:59:32,488 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 00:59:32,488 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 00:59:32,489 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 00:59:32,489 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 00:59:32,489 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:21" (3/4) ... [2021-12-16 00:59:32,491 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 00:59:32,496 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 00:59:32,496 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 00:59:32,496 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 00:59:32,496 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 00:59:32,496 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-16 00:59:32,496 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:59:32,496 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 00:59:32,507 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-16 00:59:32,507 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 00:59:32,507 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 00:59:32,508 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 00:59:32,508 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 00:59:32,508 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:59:32,508 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:59:32,523 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((systemActive == \result && waterLevel == 1) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0 [2021-12-16 00:59:32,524 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((systemActive == tmp && systemActive == \result) && waterLevel == 1) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0 [2021-12-16 00:59:32,524 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((systemActive == tmp && systemActive == \result) && waterLevel == 1) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0 [2021-12-16 00:59:32,524 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((splverifierCounter == 0 && systemActive == \result) && systemActive == tmp) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0) || ((((((splverifierCounter == 0 && systemActive == \result) && systemActive == tmp) && methaneLevelCritical == 0) && 2 <= waterLevel) && methAndRunningLastTime == 0) && systemActive == 1)) || ((((((splverifierCounter == 0 && systemActive == \result) && systemActive == tmp) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0) [2021-12-16 00:59:32,525 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) && (((!(2 <= \old(waterLevel)) || ((!(0 == \old(pumpRunning)) && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:32,526 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((methAndRunningLastTime == \old(methAndRunningLastTime) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) && (((((((methAndRunningLastTime == \old(methAndRunningLastTime) && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && systemActive == 1)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || (((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && !(0 == \old(pumpRunning))) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || (((methaneLevelCritical == 0 && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && systemActive == 1))) && (((((!(2 <= \old(waterLevel)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || ((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:32,527 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((tmp == 0 && waterLevel == \old(waterLevel)) && methAndRunningLastTime == 0) && pumpRunning == 0) || (((((tmp == 0 && methaneLevelCritical == 0) && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && methAndRunningLastTime == 0) && systemActive == 1)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) && (((((!(2 <= \old(waterLevel)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || (((((tmp == 0 && methaneLevelCritical == 0) && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && methAndRunningLastTime == 0) && systemActive == 1)) || (((((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && tmp == 0) && !(0 == \old(pumpRunning))) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:32,527 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(0 == waterLevel) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || !(systemActive == 1)) && ((((2 <= waterLevel && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((((methaneLevelCritical <= \result && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((!(0 == waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:59:32,527 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(2 <= \old(waterLevel)) || ((\result == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (((((((1 <= tmp___0 && \result == 0) && 1 <= \result) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && tmp == 0) && pumpRunning == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) && ((!(2 <= \old(waterLevel)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && (((((((\result == 0 && methAndRunningLastTime == \old(methAndRunningLastTime)) && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:32,527 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) && ((((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || (((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && (((!(2 <= \old(waterLevel)) || (((!(0 == \old(pumpRunning)) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:59:32,527 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= methaneLevelCritical) || (((methaneLevelCritical <= \result && 2 <= waterLevel) && methaneLevelCritical <= tmp) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((!(0 == waterLevel) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || !(systemActive == 1))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((!(0 == waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:59:32,527 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(0 == waterLevel) || 0 == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((((2 <= waterLevel && pumpRunning == 0) || (\result == 1 && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((!(0 == waterLevel) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || 0 == \old(pumpRunning)) || !(systemActive == 1))) && (((((\result == 1 && pumpRunning == \old(pumpRunning)) || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-16 00:59:32,528 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(0 == waterLevel) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((!(0 == waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:59:32,528 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(2 <= \old(waterLevel)) || ((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && !(0 == \old(pumpRunning))) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || ((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:32,528 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) && ((!(2 <= \old(waterLevel)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:32,528 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(0 == waterLevel) || 0 == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((((2 <= waterLevel && pumpRunning == 0) || ((\result == 0 && tmp___0 == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((((\result == 0 && tmp___0 == 0) && pumpRunning == 0) || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((!(0 == waterLevel) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || 0 == \old(pumpRunning)) || !(systemActive == 1)) [2021-12-16 00:59:32,528 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(2 <= \old(waterLevel)) || (((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && !(0 == \old(pumpRunning))) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || ((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-16 00:59:32,563 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 00:59:32,563 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 00:59:32,563 INFO L158 Benchmark]: Toolchain (without parser) took 12285.75ms. Allocated memory was 94.4MB in the beginning and 174.1MB in the end (delta: 79.7MB). Free memory was 58.0MB in the beginning and 53.8MB in the end (delta: 4.3MB). Peak memory consumption was 82.9MB. Max. memory is 16.1GB. [2021-12-16 00:59:32,564 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 94.4MB. Free memory was 75.7MB in the beginning and 75.6MB in the end (delta: 139.4kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 00:59:32,564 INFO L158 Benchmark]: CACSL2BoogieTranslator took 371.70ms. Allocated memory is still 94.4MB. Free memory was 57.9MB in the beginning and 62.3MB in the end (delta: -4.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-16 00:59:32,564 INFO L158 Benchmark]: Boogie Procedure Inliner took 42.46ms. Allocated memory is still 94.4MB. Free memory was 62.3MB in the beginning and 59.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:59:32,564 INFO L158 Benchmark]: Boogie Preprocessor took 39.85ms. Allocated memory is still 94.4MB. Free memory was 59.8MB in the beginning and 58.1MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:59:32,565 INFO L158 Benchmark]: RCFGBuilder took 428.24ms. Allocated memory is still 94.4MB. Free memory was 58.1MB in the beginning and 41.3MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-16 00:59:32,565 INFO L158 Benchmark]: TraceAbstraction took 11324.12ms. Allocated memory was 94.4MB in the beginning and 174.1MB in the end (delta: 79.7MB). Free memory was 40.8MB in the beginning and 61.1MB in the end (delta: -20.3MB). Peak memory consumption was 77.0MB. Max. memory is 16.1GB. [2021-12-16 00:59:32,565 INFO L158 Benchmark]: Witness Printer took 74.70ms. Allocated memory is still 174.1MB. Free memory was 61.1MB in the beginning and 53.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-16 00:59:32,566 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 94.4MB. Free memory was 75.7MB in the beginning and 75.6MB in the end (delta: 139.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 371.70ms. Allocated memory is still 94.4MB. Free memory was 57.9MB in the beginning and 62.3MB in the end (delta: -4.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 42.46ms. Allocated memory is still 94.4MB. Free memory was 62.3MB in the beginning and 59.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 39.85ms. Allocated memory is still 94.4MB. Free memory was 59.8MB in the beginning and 58.1MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 428.24ms. Allocated memory is still 94.4MB. Free memory was 58.1MB in the beginning and 41.3MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 11324.12ms. Allocated memory was 94.4MB in the beginning and 174.1MB in the end (delta: 79.7MB). Free memory was 40.8MB in the beginning and 61.1MB in the end (delta: -20.3MB). Peak memory consumption was 77.0MB. Max. memory is 16.1GB. * Witness Printer took 74.70ms. Allocated memory is still 174.1MB. Free memory was 61.1MB in the beginning and 53.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 993]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 93 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.2s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.2s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2555 SdHoareTripleChecker+Valid, 2.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2523 mSDsluCounter, 4408 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2855 mSDsCounter, 952 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3780 IncrementalHoareTripleChecker+Invalid, 4732 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 952 mSolverCounterUnsat, 1553 mSDtfsCounter, 3780 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 738 GetRequests, 580 SyntacticMatches, 6 SemanticMatches, 152 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 648 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=952occurred in iteration=12, InterpolantAutomatonStates: 132, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 13 MinimizatonAttempts, 693 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 1746 PreInvPairs, 1937 NumberOfFragments, 2885 HoareAnnotationTreeSize, 1746 FomulaSimplifications, 104 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 43 FomulaSimplificationsInter, 16851 FormulaSimplificationTreeSizeReductionInter, 3.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 1122 NumberOfCodeBlocks, 1122 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1244 ConstructedInterpolants, 0 QuantifiedInterpolants, 2473 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1453 ConjunctsInSsa, 26 ConjunctsInUnsatCore, 17 InterpolantComputations, 12 PerfectInterpolantSequences, 428/471 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: (((((!(2 <= \old(waterLevel)) || (((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && !(0 == \old(pumpRunning))) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || ((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: (((((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) && ((((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || (((((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1)) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && (((!(2 <= \old(waterLevel)) || (((!(0 == \old(pumpRunning)) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 311]: Loop Invariant Derived loop invariant: ((((((((((tmp == 0 && waterLevel == \old(waterLevel)) && methAndRunningLastTime == 0) && pumpRunning == 0) || (((((tmp == 0 && methaneLevelCritical == 0) && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && methAndRunningLastTime == 0) && systemActive == 1)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) && (((((!(2 <= \old(waterLevel)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || (((((tmp == 0 && methaneLevelCritical == 0) && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && methAndRunningLastTime == 0) && systemActive == 1)) || (((((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && tmp == 0) && !(0 == \old(pumpRunning))) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: (((((!(2 <= \old(waterLevel)) || ((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && !(0 == \old(pumpRunning))) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || ((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: (((((systemActive == tmp && systemActive == \result) && waterLevel == 1) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: (((((((splverifierCounter == 0 && systemActive == \result) && systemActive == tmp) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0) || ((((((splverifierCounter == 0 && systemActive == \result) && systemActive == tmp) && methaneLevelCritical == 0) && 2 <= waterLevel) && methAndRunningLastTime == 0) && systemActive == 1)) || ((((((splverifierCounter == 0 && systemActive == \result) && systemActive == tmp) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0) - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: (((((!(0 == waterLevel) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || !(systemActive == 1)) && ((((2 <= waterLevel && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((((methaneLevelCritical <= \result && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((!(0 == waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 98]: Loop Invariant Derived loop invariant: (((((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) && (((!(2 <= \old(waterLevel)) || ((!(0 == \old(pumpRunning)) && pumpRunning == \old(pumpRunning)) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 438]: Loop Invariant Derived loop invariant: (((((!(1 <= methaneLevelCritical) || (((methaneLevelCritical <= \result && 2 <= waterLevel) && methaneLevelCritical <= tmp) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((!(0 == waterLevel) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || !(systemActive == 1))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((!(0 == waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 989]: Loop Invariant Derived loop invariant: (((((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) && ((!(2 <= \old(waterLevel)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: (((((!(0 == waterLevel) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((!(0 == waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 404]: Loop Invariant Derived loop invariant: ((((((((methAndRunningLastTime == \old(methAndRunningLastTime) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) && (((((((methAndRunningLastTime == \old(methAndRunningLastTime) && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && systemActive == 1)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || (((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && !(0 == \old(pumpRunning))) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || (((methaneLevelCritical == 0 && waterLevel == \old(waterLevel)) && 2 <= waterLevel) && systemActive == 1))) && (((((!(2 <= \old(waterLevel)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || ((((((((tmp == 1 && 0 == waterLevel) || (!(0 == waterLevel) && tmp == 0)) && 1 <= tmp___0) && ((!(0 == waterLevel) && \result == 0) || (0 == waterLevel && \result == 1))) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((((systemActive == \result && waterLevel == 1) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 519]: Loop Invariant Derived loop invariant: (((((!(0 == waterLevel) || 0 == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((((2 <= waterLevel && pumpRunning == 0) || ((\result == 0 && tmp___0 == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((((\result == 0 && tmp___0 == 0) && pumpRunning == 0) || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((!(0 == waterLevel) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || 0 == \old(pumpRunning)) || !(systemActive == 1)) - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (((((!(0 == waterLevel) || 0 == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((((2 <= waterLevel && pumpRunning == 0) || (\result == 1 && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((!(0 == waterLevel) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || 0 == \old(pumpRunning)) || !(systemActive == 1))) && (((((\result == 1 && pumpRunning == \old(pumpRunning)) || (pumpRunning == \old(pumpRunning) && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: (((((((!(2 <= \old(waterLevel)) || ((\result == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (((((((1 <= tmp___0 && \result == 0) && 1 <= \result) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp) && tmp == 0) && pumpRunning == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) && ((!(2 <= \old(waterLevel)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0))) && (((((((\result == 0 && methAndRunningLastTime == \old(methAndRunningLastTime)) && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 558]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 256]: Loop Invariant Derived loop invariant: (((((systemActive == tmp && systemActive == \result) && waterLevel == 1) && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0 RESULT: Ultimate proved your program to be correct! [2021-12-16 00:59:32,602 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE