./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 458689bcd0930e2b07a61b7490d83be8ce4e59412b26a60581bf78c492ee412e --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 00:59:52,808 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 00:59:52,810 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 00:59:52,855 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 00:59:52,856 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 00:59:52,857 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 00:59:52,857 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 00:59:52,859 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 00:59:52,864 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 00:59:52,867 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 00:59:52,868 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 00:59:52,868 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 00:59:52,869 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 00:59:52,871 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 00:59:52,872 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 00:59:52,872 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 00:59:52,873 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 00:59:52,874 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 00:59:52,875 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 00:59:52,876 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 00:59:52,877 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 00:59:52,879 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 00:59:52,880 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 00:59:52,881 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 00:59:52,885 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 00:59:52,885 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 00:59:52,885 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 00:59:52,886 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 00:59:52,886 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 00:59:52,886 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 00:59:52,887 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 00:59:52,890 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 00:59:52,891 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 00:59:52,892 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 00:59:52,893 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 00:59:52,893 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 00:59:52,894 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 00:59:52,894 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 00:59:52,894 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 00:59:52,896 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 00:59:52,897 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 00:59:52,898 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 00:59:52,917 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 00:59:52,923 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 00:59:52,923 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 00:59:52,924 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 00:59:52,924 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 00:59:52,924 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 00:59:52,925 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 00:59:52,925 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 00:59:52,925 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 00:59:52,925 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 00:59:52,926 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 00:59:52,926 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 00:59:52,926 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 00:59:52,926 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 00:59:52,927 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 00:59:52,927 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 00:59:52,927 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 00:59:52,927 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 00:59:52,927 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 00:59:52,927 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 00:59:52,928 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 00:59:52,928 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 00:59:52,928 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 00:59:52,928 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 00:59:52,928 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:59:52,928 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 00:59:52,929 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 00:59:52,929 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 00:59:52,930 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 00:59:52,930 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 00:59:52,930 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 00:59:52,930 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 00:59:52,930 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 00:59:52,930 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 00:59:52,931 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 458689bcd0930e2b07a61b7490d83be8ce4e59412b26a60581bf78c492ee412e [2021-12-16 00:59:53,115 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 00:59:53,141 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 00:59:53,143 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 00:59:53,144 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 00:59:53,144 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 00:59:53,145 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c [2021-12-16 00:59:53,191 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6a2259ec3/19714e68f02847ee9f5185af770ae36e/FLAGd2df96c1b [2021-12-16 00:59:53,546 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 00:59:53,546 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c [2021-12-16 00:59:53,561 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6a2259ec3/19714e68f02847ee9f5185af770ae36e/FLAGd2df96c1b [2021-12-16 00:59:53,927 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6a2259ec3/19714e68f02847ee9f5185af770ae36e [2021-12-16 00:59:53,930 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 00:59:53,932 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 00:59:53,933 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 00:59:53,933 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 00:59:53,936 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 00:59:53,936 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:59:53" (1/1) ... [2021-12-16 00:59:53,937 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6b9c7a34 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:53, skipping insertion in model container [2021-12-16 00:59:53,937 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:59:53" (1/1) ... [2021-12-16 00:59:53,941 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 00:59:53,973 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 00:59:54,211 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c[18431,18444] [2021-12-16 00:59:54,213 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:59:54,223 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 00:59:54,271 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c[18431,18444] [2021-12-16 00:59:54,271 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:59:54,282 INFO L208 MainTranslator]: Completed translation [2021-12-16 00:59:54,282 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:54 WrapperNode [2021-12-16 00:59:54,282 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 00:59:54,283 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 00:59:54,283 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 00:59:54,283 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 00:59:54,288 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:54" (1/1) ... [2021-12-16 00:59:54,296 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:54" (1/1) ... [2021-12-16 00:59:54,324 INFO L137 Inliner]: procedures = 55, calls = 157, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 253 [2021-12-16 00:59:54,325 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 00:59:54,326 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 00:59:54,326 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 00:59:54,326 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 00:59:54,331 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:54" (1/1) ... [2021-12-16 00:59:54,331 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:54" (1/1) ... [2021-12-16 00:59:54,343 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:54" (1/1) ... [2021-12-16 00:59:54,345 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:54" (1/1) ... [2021-12-16 00:59:54,349 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:54" (1/1) ... [2021-12-16 00:59:54,359 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:54" (1/1) ... [2021-12-16 00:59:54,361 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:54" (1/1) ... [2021-12-16 00:59:54,365 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 00:59:54,366 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 00:59:54,366 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 00:59:54,367 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 00:59:54,368 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:54" (1/1) ... [2021-12-16 00:59:54,372 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:59:54,379 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:54,403 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 00:59:54,429 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 00:59:54,450 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 00:59:54,450 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 00:59:54,450 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 00:59:54,450 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 00:59:54,450 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 00:59:54,450 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 00:59:54,451 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 00:59:54,451 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-16 00:59:54,451 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-16 00:59:54,451 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 00:59:54,452 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 00:59:54,452 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-16 00:59:54,452 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-16 00:59:54,452 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-16 00:59:54,452 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-16 00:59:54,452 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 00:59:54,452 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 00:59:54,452 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 00:59:54,453 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 00:59:54,453 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 00:59:54,522 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 00:59:54,524 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 00:59:54,737 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 00:59:54,742 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 00:59:54,743 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 00:59:54,744 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:54 BoogieIcfgContainer [2021-12-16 00:59:54,745 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 00:59:54,754 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 00:59:54,754 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 00:59:54,757 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 00:59:54,758 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 12:59:53" (1/3) ... [2021-12-16 00:59:54,759 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a5443b8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:59:54, skipping insertion in model container [2021-12-16 00:59:54,759 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:54" (2/3) ... [2021-12-16 00:59:54,759 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a5443b8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:59:54, skipping insertion in model container [2021-12-16 00:59:54,759 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:54" (3/3) ... [2021-12-16 00:59:54,760 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product46.cil.c [2021-12-16 00:59:54,764 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 00:59:54,764 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 00:59:54,804 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 00:59:54,810 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 00:59:54,811 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 00:59:54,834 INFO L276 IsEmpty]: Start isEmpty. Operand has 96 states, 72 states have (on average 1.375) internal successors, (99), 80 states have internal predecessors, (99), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-16 00:59:54,840 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-16 00:59:54,841 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:54,841 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:54,842 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:54,845 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:54,846 INFO L85 PathProgramCache]: Analyzing trace with hash -1887688965, now seen corresponding path program 1 times [2021-12-16 00:59:54,851 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:54,852 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [459408802] [2021-12-16 00:59:54,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:54,853 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:54,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:55,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,017 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:55,018 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:55,019 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [459408802] [2021-12-16 00:59:55,019 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [459408802] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:55,019 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:55,020 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 00:59:55,021 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1291542734] [2021-12-16 00:59:55,022 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:55,025 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 00:59:55,025 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:55,046 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 00:59:55,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:59:55,049 INFO L87 Difference]: Start difference. First operand has 96 states, 72 states have (on average 1.375) internal successors, (99), 80 states have internal predecessors, (99), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:55,089 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:55,089 INFO L93 Difference]: Finished difference Result 184 states and 249 transitions. [2021-12-16 00:59:55,090 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 00:59:55,091 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-16 00:59:55,092 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:55,098 INFO L225 Difference]: With dead ends: 184 [2021-12-16 00:59:55,098 INFO L226 Difference]: Without dead ends: 87 [2021-12-16 00:59:55,101 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:59:55,104 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:55,105 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:55,116 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2021-12-16 00:59:55,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 87. [2021-12-16 00:59:55,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 72 states have internal predecessors, (85), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-16 00:59:55,151 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 112 transitions. [2021-12-16 00:59:55,152 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 112 transitions. Word has length 25 [2021-12-16 00:59:55,152 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:55,153 INFO L470 AbstractCegarLoop]: Abstraction has 87 states and 112 transitions. [2021-12-16 00:59:55,153 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:55,153 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2021-12-16 00:59:55,156 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-16 00:59:55,156 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:55,157 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:55,157 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 00:59:55,157 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:55,159 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:55,160 INFO L85 PathProgramCache]: Analyzing trace with hash -2062523597, now seen corresponding path program 1 times [2021-12-16 00:59:55,160 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:55,160 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [601725687] [2021-12-16 00:59:55,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:55,161 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:55,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 00:59:55,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,242 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:55,243 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:55,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [601725687] [2021-12-16 00:59:55,243 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [601725687] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:55,244 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:55,244 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:59:55,244 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1719768851] [2021-12-16 00:59:55,244 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:55,246 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:59:55,246 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:55,247 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:59:55,247 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:55,247 INFO L87 Difference]: Start difference. First operand 87 states and 112 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:55,274 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:55,275 INFO L93 Difference]: Finished difference Result 139 states and 179 transitions. [2021-12-16 00:59:55,277 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:59:55,277 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-16 00:59:55,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:55,279 INFO L225 Difference]: With dead ends: 139 [2021-12-16 00:59:55,279 INFO L226 Difference]: Without dead ends: 78 [2021-12-16 00:59:55,281 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:55,283 INFO L933 BasicCegarLoop]: 99 mSDtfsCounter, 13 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 181 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:55,284 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 181 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:55,285 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2021-12-16 00:59:55,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2021-12-16 00:59:55,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-16 00:59:55,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 100 transitions. [2021-12-16 00:59:55,294 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 100 transitions. Word has length 26 [2021-12-16 00:59:55,294 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:55,295 INFO L470 AbstractCegarLoop]: Abstraction has 78 states and 100 transitions. [2021-12-16 00:59:55,295 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:55,295 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2021-12-16 00:59:55,299 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-12-16 00:59:55,299 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:55,299 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:55,300 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 00:59:55,300 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:55,306 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:55,306 INFO L85 PathProgramCache]: Analyzing trace with hash -89675643, now seen corresponding path program 1 times [2021-12-16 00:59:55,306 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:55,306 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [711317413] [2021-12-16 00:59:55,307 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:55,307 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:55,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:55,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,411 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:55,411 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:55,411 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [711317413] [2021-12-16 00:59:55,411 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [711317413] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:55,411 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:55,412 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:55,412 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [616559073] [2021-12-16 00:59:55,412 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:55,412 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:55,412 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:55,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:55,413 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:55,413 INFO L87 Difference]: Start difference. First operand 78 states and 100 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:55,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:55,485 INFO L93 Difference]: Finished difference Result 149 states and 194 transitions. [2021-12-16 00:59:55,485 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 00:59:55,485 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-12-16 00:59:55,485 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:55,486 INFO L225 Difference]: With dead ends: 149 [2021-12-16 00:59:55,486 INFO L226 Difference]: Without dead ends: 78 [2021-12-16 00:59:55,487 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-16 00:59:55,487 INFO L933 BasicCegarLoop]: 93 mSDtfsCounter, 125 mSDsluCounter, 114 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:55,488 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [125 Valid, 207 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:55,488 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2021-12-16 00:59:55,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2021-12-16 00:59:55,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.305084745762712) internal successors, (77), 66 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-16 00:59:55,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 99 transitions. [2021-12-16 00:59:55,494 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 99 transitions. Word has length 31 [2021-12-16 00:59:55,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:55,495 INFO L470 AbstractCegarLoop]: Abstraction has 78 states and 99 transitions. [2021-12-16 00:59:55,495 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:55,495 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2021-12-16 00:59:55,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-16 00:59:55,496 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:55,496 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:55,496 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 00:59:55,496 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:55,497 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:55,497 INFO L85 PathProgramCache]: Analyzing trace with hash -106405387, now seen corresponding path program 1 times [2021-12-16 00:59:55,497 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:55,497 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [493191574] [2021-12-16 00:59:55,497 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:55,497 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:55,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:55,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:55,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-16 00:59:55,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:55,591 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:55,591 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [493191574] [2021-12-16 00:59:55,592 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [493191574] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:55,592 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:55,592 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 00:59:55,592 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2038655314] [2021-12-16 00:59:55,592 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:55,592 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 00:59:55,593 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:55,593 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 00:59:55,594 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 00:59:55,594 INFO L87 Difference]: Start difference. First operand 78 states and 99 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-16 00:59:55,745 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:55,745 INFO L93 Difference]: Finished difference Result 233 states and 295 transitions. [2021-12-16 00:59:55,746 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:59:55,746 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2021-12-16 00:59:55,746 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:55,747 INFO L225 Difference]: With dead ends: 233 [2021-12-16 00:59:55,747 INFO L226 Difference]: Without dead ends: 162 [2021-12-16 00:59:55,748 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-16 00:59:55,748 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 187 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 106 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 189 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 106 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:55,749 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [189 Valid, 316 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:55,750 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2021-12-16 00:59:55,760 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 156. [2021-12-16 00:59:55,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 119 states have (on average 1.2605042016806722) internal successors, (150), 127 states have internal predecessors, (150), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-16 00:59:55,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 191 transitions. [2021-12-16 00:59:55,777 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 191 transitions. Word has length 41 [2021-12-16 00:59:55,777 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:55,777 INFO L470 AbstractCegarLoop]: Abstraction has 156 states and 191 transitions. [2021-12-16 00:59:55,777 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-16 00:59:55,777 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 191 transitions. [2021-12-16 00:59:55,778 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-16 00:59:55,778 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:55,778 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:55,779 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 00:59:55,779 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:55,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:55,779 INFO L85 PathProgramCache]: Analyzing trace with hash -822814067, now seen corresponding path program 1 times [2021-12-16 00:59:55,779 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:55,780 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [276229448] [2021-12-16 00:59:55,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:55,780 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:55,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:55,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:55,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-12-16 00:59:55,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:55,882 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:55,883 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:55,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [276229448] [2021-12-16 00:59:55,883 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [276229448] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:55,883 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:55,883 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:55,883 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [478883753] [2021-12-16 00:59:55,883 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:55,884 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:55,884 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:55,884 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:55,884 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:55,885 INFO L87 Difference]: Start difference. First operand 156 states and 191 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 00:59:56,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:56,109 INFO L93 Difference]: Finished difference Result 405 states and 515 transitions. [2021-12-16 00:59:56,112 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 00:59:56,112 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2021-12-16 00:59:56,113 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:56,114 INFO L225 Difference]: With dead ends: 405 [2021-12-16 00:59:56,114 INFO L226 Difference]: Without dead ends: 256 [2021-12-16 00:59:56,115 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2021-12-16 00:59:56,119 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 138 mSDsluCounter, 285 mSDsCounter, 0 mSdLazyCounter, 160 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 160 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:56,122 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [145 Valid, 385 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 160 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:56,123 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2021-12-16 00:59:56,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 248. [2021-12-16 00:59:56,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 248 states, 189 states have (on average 1.2486772486772486) internal successors, (236), 200 states have internal predecessors, (236), 30 states have call successors, (30), 26 states have call predecessors, (30), 28 states have return successors, (40), 30 states have call predecessors, (40), 30 states have call successors, (40) [2021-12-16 00:59:56,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 248 states and 306 transitions. [2021-12-16 00:59:56,154 INFO L78 Accepts]: Start accepts. Automaton has 248 states and 306 transitions. Word has length 47 [2021-12-16 00:59:56,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:56,155 INFO L470 AbstractCegarLoop]: Abstraction has 248 states and 306 transitions. [2021-12-16 00:59:56,155 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-16 00:59:56,155 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 306 transitions. [2021-12-16 00:59:56,156 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-16 00:59:56,156 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:56,156 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:56,156 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 00:59:56,156 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:56,157 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:56,157 INFO L85 PathProgramCache]: Analyzing trace with hash 688456935, now seen corresponding path program 1 times [2021-12-16 00:59:56,157 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:56,157 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1710670509] [2021-12-16 00:59:56,157 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:56,157 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:56,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:56,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 00:59:56,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:56,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:56,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:56,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:56,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:56,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-16 00:59:56,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:56,269 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:56,269 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:56,270 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1710670509] [2021-12-16 00:59:56,270 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1710670509] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:56,270 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:56,270 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-16 00:59:56,270 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [548672402] [2021-12-16 00:59:56,270 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:56,270 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 00:59:56,270 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:56,271 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 00:59:56,271 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-12-16 00:59:56,271 INFO L87 Difference]: Start difference. First operand 248 states and 306 transitions. Second operand has 8 states, 8 states have (on average 5.25) internal successors, (42), 6 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 00:59:56,662 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:56,662 INFO L93 Difference]: Finished difference Result 606 states and 779 transitions. [2021-12-16 00:59:56,662 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-12-16 00:59:56,662 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.25) internal successors, (42), 6 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 51 [2021-12-16 00:59:56,663 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:56,666 INFO L225 Difference]: With dead ends: 606 [2021-12-16 00:59:56,666 INFO L226 Difference]: Without dead ends: 457 [2021-12-16 00:59:56,667 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 96 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=141, Invalid=365, Unknown=0, NotChecked=0, Total=506 [2021-12-16 00:59:56,667 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 382 mSDsluCounter, 289 mSDsCounter, 0 mSdLazyCounter, 314 mSolverCounterSat, 151 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 387 SdHoareTripleChecker+Valid, 390 SdHoareTripleChecker+Invalid, 465 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 151 IncrementalHoareTripleChecker+Valid, 314 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:56,668 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [387 Valid, 390 Invalid, 465 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [151 Valid, 314 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-16 00:59:56,668 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 457 states. [2021-12-16 00:59:56,694 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 457 to 411. [2021-12-16 00:59:56,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 411 states, 312 states have (on average 1.2243589743589745) internal successors, (382), 332 states have internal predecessors, (382), 50 states have call successors, (50), 39 states have call predecessors, (50), 48 states have return successors, (77), 51 states have call predecessors, (77), 50 states have call successors, (77) [2021-12-16 00:59:56,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 411 states to 411 states and 509 transitions. [2021-12-16 00:59:56,705 INFO L78 Accepts]: Start accepts. Automaton has 411 states and 509 transitions. Word has length 51 [2021-12-16 00:59:56,705 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:56,706 INFO L470 AbstractCegarLoop]: Abstraction has 411 states and 509 transitions. [2021-12-16 00:59:56,706 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.25) internal successors, (42), 6 states have internal predecessors, (42), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 00:59:56,706 INFO L276 IsEmpty]: Start isEmpty. Operand 411 states and 509 transitions. [2021-12-16 00:59:56,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-16 00:59:56,706 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:56,707 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:56,707 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-16 00:59:56,707 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:56,707 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:56,707 INFO L85 PathProgramCache]: Analyzing trace with hash 554443429, now seen corresponding path program 1 times [2021-12-16 00:59:56,707 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:56,707 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [741051859] [2021-12-16 00:59:56,707 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:56,707 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:56,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:56,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 00:59:56,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:56,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:56,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:56,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:56,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:56,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-16 00:59:56,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:56,759 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:56,759 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:56,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [741051859] [2021-12-16 00:59:56,759 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [741051859] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:56,759 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:56,759 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:56,759 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [78763865] [2021-12-16 00:59:56,759 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:56,760 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:56,760 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:56,761 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:56,761 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:56,761 INFO L87 Difference]: Start difference. First operand 411 states and 509 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:59:56,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:56,913 INFO L93 Difference]: Finished difference Result 761 states and 949 transitions. [2021-12-16 00:59:56,914 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-16 00:59:56,914 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2021-12-16 00:59:56,914 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:56,918 INFO L225 Difference]: With dead ends: 761 [2021-12-16 00:59:56,919 INFO L226 Difference]: Without dead ends: 445 [2021-12-16 00:59:56,922 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:59:56,923 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 161 mSDsluCounter, 243 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 360 SdHoareTripleChecker+Invalid, 246 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:56,923 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [164 Valid, 360 Invalid, 246 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:56,924 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 445 states. [2021-12-16 00:59:56,960 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 445 to 411. [2021-12-16 00:59:56,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 411 states, 312 states have (on average 1.2211538461538463) internal successors, (381), 332 states have internal predecessors, (381), 50 states have call successors, (50), 39 states have call predecessors, (50), 48 states have return successors, (77), 51 states have call predecessors, (77), 50 states have call successors, (77) [2021-12-16 00:59:56,962 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 411 states to 411 states and 508 transitions. [2021-12-16 00:59:56,962 INFO L78 Accepts]: Start accepts. Automaton has 411 states and 508 transitions. Word has length 51 [2021-12-16 00:59:56,963 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:56,963 INFO L470 AbstractCegarLoop]: Abstraction has 411 states and 508 transitions. [2021-12-16 00:59:56,969 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:59:56,969 INFO L276 IsEmpty]: Start isEmpty. Operand 411 states and 508 transitions. [2021-12-16 00:59:56,970 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-16 00:59:56,970 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:56,970 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:56,970 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-16 00:59:56,970 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:56,970 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:56,970 INFO L85 PathProgramCache]: Analyzing trace with hash 773298147, now seen corresponding path program 1 times [2021-12-16 00:59:56,970 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:56,971 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1897656675] [2021-12-16 00:59:56,971 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:56,971 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:56,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:56,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 00:59:56,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:56,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:57,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:57,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:57,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:57,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-16 00:59:57,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:57,020 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:57,020 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:57,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1897656675] [2021-12-16 00:59:57,020 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1897656675] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:57,020 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:57,020 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:59:57,020 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1291510156] [2021-12-16 00:59:57,020 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:57,020 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:57,020 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:57,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:57,021 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:57,021 INFO L87 Difference]: Start difference. First operand 411 states and 508 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:59:57,186 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:57,187 INFO L93 Difference]: Finished difference Result 844 states and 1055 transitions. [2021-12-16 00:59:57,187 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 00:59:57,187 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2021-12-16 00:59:57,187 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:57,189 INFO L225 Difference]: With dead ends: 844 [2021-12-16 00:59:57,189 INFO L226 Difference]: Without dead ends: 440 [2021-12-16 00:59:57,190 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:59:57,190 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 163 mSDsluCounter, 312 mSDsCounter, 0 mSdLazyCounter, 227 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 413 SdHoareTripleChecker+Invalid, 277 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 227 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:57,190 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [166 Valid, 413 Invalid, 277 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 227 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:57,191 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 440 states. [2021-12-16 00:59:57,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 440 to 414. [2021-12-16 00:59:57,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 317 states have (on average 1.2145110410094637) internal successors, (385), 336 states have internal predecessors, (385), 49 states have call successors, (49), 38 states have call predecessors, (49), 47 states have return successors, (76), 50 states have call predecessors, (76), 49 states have call successors, (76) [2021-12-16 00:59:57,206 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 510 transitions. [2021-12-16 00:59:57,206 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 510 transitions. Word has length 51 [2021-12-16 00:59:57,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:57,206 INFO L470 AbstractCegarLoop]: Abstraction has 414 states and 510 transitions. [2021-12-16 00:59:57,206 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:59:57,206 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 510 transitions. [2021-12-16 00:59:57,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-16 00:59:57,207 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:57,207 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:57,207 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-16 00:59:57,207 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:57,207 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:57,207 INFO L85 PathProgramCache]: Analyzing trace with hash 271087281, now seen corresponding path program 1 times [2021-12-16 00:59:57,208 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:57,208 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1454606391] [2021-12-16 00:59:57,208 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:57,208 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:57,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:57,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 00:59:57,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:57,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:57,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:57,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:57,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:57,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:57,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:57,295 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2021-12-16 00:59:57,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:57,298 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-16 00:59:57,298 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:57,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1454606391] [2021-12-16 00:59:57,298 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1454606391] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:57,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [309293049] [2021-12-16 00:59:57,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:57,298 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:57,298 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:57,299 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:57,310 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 00:59:57,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:57,371 INFO L263 TraceCheckSpWp]: Trace formula consists of 386 conjuncts, 17 conjunts are in the unsatisfiable core [2021-12-16 00:59:57,375 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:57,624 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:57,625 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:59:57,625 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [309293049] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:57,625 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:59:57,625 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2021-12-16 00:59:57,626 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [140014416] [2021-12-16 00:59:57,626 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:57,626 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 00:59:57,626 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:57,627 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 00:59:57,627 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2021-12-16 00:59:57,627 INFO L87 Difference]: Start difference. First operand 414 states and 510 transitions. Second operand has 8 states, 8 states have (on average 6.125) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 00:59:57,724 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:57,724 INFO L93 Difference]: Finished difference Result 1211 states and 1518 transitions. [2021-12-16 00:59:57,725 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:59:57,725 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2021-12-16 00:59:57,726 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:57,729 INFO L225 Difference]: With dead ends: 1211 [2021-12-16 00:59:57,729 INFO L226 Difference]: Without dead ends: 804 [2021-12-16 00:59:57,730 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2021-12-16 00:59:57,731 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 58 mSDsluCounter, 473 mSDsCounter, 0 mSdLazyCounter, 152 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 581 SdHoareTripleChecker+Invalid, 156 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:57,731 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [62 Valid, 581 Invalid, 156 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 152 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:57,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 804 states. [2021-12-16 00:59:57,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 804 to 802. [2021-12-16 00:59:57,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 802 states, 612 states have (on average 1.2026143790849673) internal successors, (736), 646 states have internal predecessors, (736), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (154), 98 states have call predecessors, (154), 97 states have call successors, (154) [2021-12-16 00:59:57,766 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 802 states to 802 states and 987 transitions. [2021-12-16 00:59:57,766 INFO L78 Accepts]: Start accepts. Automaton has 802 states and 987 transitions. Word has length 60 [2021-12-16 00:59:57,767 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:57,768 INFO L470 AbstractCegarLoop]: Abstraction has 802 states and 987 transitions. [2021-12-16 00:59:57,768 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.125) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 00:59:57,768 INFO L276 IsEmpty]: Start isEmpty. Operand 802 states and 987 transitions. [2021-12-16 00:59:57,769 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-16 00:59:57,769 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:57,769 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:57,788 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-16 00:59:57,983 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:57,983 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:57,984 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:57,984 INFO L85 PathProgramCache]: Analyzing trace with hash -907258435, now seen corresponding path program 1 times [2021-12-16 00:59:57,984 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:57,984 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1650436873] [2021-12-16 00:59:57,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:57,984 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:57,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:58,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 00:59:58,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:58,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:58,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:58,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:58,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:58,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:58,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:58,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-16 00:59:58,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:58,059 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:58,059 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:58,059 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1650436873] [2021-12-16 00:59:58,059 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1650436873] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:58,059 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:58,059 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-16 00:59:58,059 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [903437] [2021-12-16 00:59:58,059 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:58,060 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-16 00:59:58,060 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:58,060 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-16 00:59:58,060 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-12-16 00:59:58,061 INFO L87 Difference]: Start difference. First operand 802 states and 987 transitions. Second operand has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 00:59:58,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:58,441 INFO L93 Difference]: Finished difference Result 1620 states and 1989 transitions. [2021-12-16 00:59:58,441 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-16 00:59:58,441 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2021-12-16 00:59:58,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:58,444 INFO L225 Difference]: With dead ends: 1620 [2021-12-16 00:59:58,444 INFO L226 Difference]: Without dead ends: 825 [2021-12-16 00:59:58,446 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=90, Invalid=330, Unknown=0, NotChecked=0, Total=420 [2021-12-16 00:59:58,447 INFO L933 BasicCegarLoop]: 160 mSDtfsCounter, 300 mSDsluCounter, 554 mSDsCounter, 0 mSdLazyCounter, 494 mSolverCounterSat, 114 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 301 SdHoareTripleChecker+Valid, 714 SdHoareTripleChecker+Invalid, 608 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 114 IncrementalHoareTripleChecker+Valid, 494 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:58,447 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [301 Valid, 714 Invalid, 608 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [114 Valid, 494 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-16 00:59:58,448 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 825 states. [2021-12-16 00:59:58,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 825 to 802. [2021-12-16 00:59:58,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 802 states, 612 states have (on average 1.1862745098039216) internal successors, (726), 646 states have internal predecessors, (726), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (139), 98 states have call predecessors, (139), 97 states have call successors, (139) [2021-12-16 00:59:58,476 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 802 states to 802 states and 962 transitions. [2021-12-16 00:59:58,477 INFO L78 Accepts]: Start accepts. Automaton has 802 states and 962 transitions. Word has length 61 [2021-12-16 00:59:58,477 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:58,477 INFO L470 AbstractCegarLoop]: Abstraction has 802 states and 962 transitions. [2021-12-16 00:59:58,477 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 00:59:58,477 INFO L276 IsEmpty]: Start isEmpty. Operand 802 states and 962 transitions. [2021-12-16 00:59:58,478 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-16 00:59:58,478 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:58,479 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:58,479 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-16 00:59:58,479 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:58,479 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:58,479 INFO L85 PathProgramCache]: Analyzing trace with hash -662505803, now seen corresponding path program 1 times [2021-12-16 00:59:58,480 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:58,480 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [285582838] [2021-12-16 00:59:58,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:58,480 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:58,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:58,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 00:59:58,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:58,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-16 00:59:58,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:58,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 00:59:58,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:58,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:58,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:58,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:58,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:58,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2021-12-16 00:59:58,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:58,559 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-16 00:59:58,560 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:58,560 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [285582838] [2021-12-16 00:59:58,560 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [285582838] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:58,560 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:58,560 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2021-12-16 00:59:58,560 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [870557551] [2021-12-16 00:59:58,560 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:58,561 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2021-12-16 00:59:58,561 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:58,561 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2021-12-16 00:59:58,561 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=110, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:59:58,562 INFO L87 Difference]: Start difference. First operand 802 states and 962 transitions. Second operand has 12 states, 12 states have (on average 4.25) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 5 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 00:59:59,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:59,230 INFO L93 Difference]: Finished difference Result 1598 states and 1936 transitions. [2021-12-16 00:59:59,230 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2021-12-16 00:59:59,230 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 5 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 64 [2021-12-16 00:59:59,231 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:59,233 INFO L225 Difference]: With dead ends: 1598 [2021-12-16 00:59:59,233 INFO L226 Difference]: Without dead ends: 803 [2021-12-16 00:59:59,235 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 288 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=262, Invalid=1070, Unknown=0, NotChecked=0, Total=1332 [2021-12-16 00:59:59,235 INFO L933 BasicCegarLoop]: 156 mSDtfsCounter, 292 mSDsluCounter, 367 mSDsCounter, 0 mSdLazyCounter, 1218 mSolverCounterSat, 173 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 293 SdHoareTripleChecker+Valid, 523 SdHoareTripleChecker+Invalid, 1391 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 173 IncrementalHoareTripleChecker+Valid, 1218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:59,235 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [293 Valid, 523 Invalid, 1391 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [173 Valid, 1218 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-16 00:59:59,236 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 803 states. [2021-12-16 00:59:59,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 803 to 770. [2021-12-16 00:59:59,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 770 states, 580 states have (on average 1.1551724137931034) internal successors, (670), 614 states have internal predecessors, (670), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (133), 98 states have call predecessors, (133), 97 states have call successors, (133) [2021-12-16 00:59:59,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 770 states to 770 states and 900 transitions. [2021-12-16 00:59:59,266 INFO L78 Accepts]: Start accepts. Automaton has 770 states and 900 transitions. Word has length 64 [2021-12-16 00:59:59,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:59,266 INFO L470 AbstractCegarLoop]: Abstraction has 770 states and 900 transitions. [2021-12-16 00:59:59,266 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.25) internal successors, (51), 8 states have internal predecessors, (51), 2 states have call successors, (7), 5 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 00:59:59,266 INFO L276 IsEmpty]: Start isEmpty. Operand 770 states and 900 transitions. [2021-12-16 00:59:59,268 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-16 00:59:59,268 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:59,268 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:59,268 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-12-16 00:59:59,268 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:59,269 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:59,269 INFO L85 PathProgramCache]: Analyzing trace with hash 2101060045, now seen corresponding path program 1 times [2021-12-16 00:59:59,269 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:59,269 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1009882877] [2021-12-16 00:59:59,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:59,269 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:59,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-16 00:59:59,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:59:59,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:59,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:59,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-16 00:59:59,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2021-12-16 00:59:59,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2021-12-16 00:59:59,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:59,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-16 00:59:59,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,339 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2021-12-16 00:59:59,339 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:59,339 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1009882877] [2021-12-16 00:59:59,339 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1009882877] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:59,339 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:59,339 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-16 00:59:59,339 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2134180831] [2021-12-16 00:59:59,339 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:59,339 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 00:59:59,339 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:59,340 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 00:59:59,340 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-16 00:59:59,340 INFO L87 Difference]: Start difference. First operand 770 states and 900 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-16 00:59:59,468 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:59,468 INFO L93 Difference]: Finished difference Result 1537 states and 1816 transitions. [2021-12-16 00:59:59,468 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:59:59,469 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 99 [2021-12-16 00:59:59,469 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:59,471 INFO L225 Difference]: With dead ends: 1537 [2021-12-16 00:59:59,471 INFO L226 Difference]: Without dead ends: 774 [2021-12-16 00:59:59,472 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2021-12-16 00:59:59,473 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 132 mSDsluCounter, 312 mSDsCounter, 0 mSdLazyCounter, 230 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 407 SdHoareTripleChecker+Invalid, 275 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 230 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:59,473 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [140 Valid, 407 Invalid, 275 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 230 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:59,473 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 774 states. [2021-12-16 00:59:59,500 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 774 to 770. [2021-12-16 00:59:59,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 770 states, 580 states have (on average 1.1482758620689655) internal successors, (666), 614 states have internal predecessors, (666), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (133), 98 states have call predecessors, (133), 97 states have call successors, (133) [2021-12-16 00:59:59,502 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 770 states to 770 states and 896 transitions. [2021-12-16 00:59:59,503 INFO L78 Accepts]: Start accepts. Automaton has 770 states and 896 transitions. Word has length 99 [2021-12-16 00:59:59,503 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:59,503 INFO L470 AbstractCegarLoop]: Abstraction has 770 states and 896 transitions. [2021-12-16 00:59:59,503 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-16 00:59:59,503 INFO L276 IsEmpty]: Start isEmpty. Operand 770 states and 896 transitions. [2021-12-16 00:59:59,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-16 00:59:59,505 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:59,505 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:59,505 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-12-16 00:59:59,505 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:59,505 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:59,505 INFO L85 PathProgramCache]: Analyzing trace with hash -1306684405, now seen corresponding path program 1 times [2021-12-16 00:59:59,505 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:59,505 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1064455176] [2021-12-16 00:59:59,505 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:59,506 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:59,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-16 00:59:59,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:59:59,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:59,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:59,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-16 00:59:59,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2021-12-16 00:59:59,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2021-12-16 00:59:59,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:59,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-16 00:59:59,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,633 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 18 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-16 00:59:59,633 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:59,633 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1064455176] [2021-12-16 00:59:59,633 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1064455176] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:59,634 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1670888033] [2021-12-16 00:59:59,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:59,634 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:59,634 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:59,635 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:59,636 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-16 00:59:59,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:59,704 INFO L263 TraceCheckSpWp]: Trace formula consists of 482 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-16 00:59:59,709 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:59,832 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2021-12-16 00:59:59,832 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:59:59,832 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1670888033] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:59,832 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:59:59,832 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [13] total 15 [2021-12-16 00:59:59,833 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [778387159] [2021-12-16 00:59:59,833 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:59,833 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-16 00:59:59,833 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:59,833 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 00:59:59,834 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2021-12-16 00:59:59,834 INFO L87 Difference]: Start difference. First operand 770 states and 896 transitions. Second operand has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-16 00:59:59,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:59,863 INFO L93 Difference]: Finished difference Result 1389 states and 1635 transitions. [2021-12-16 00:59:59,863 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-16 00:59:59,863 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) Word has length 99 [2021-12-16 00:59:59,863 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:59,865 INFO L225 Difference]: With dead ends: 1389 [2021-12-16 00:59:59,866 INFO L226 Difference]: Without dead ends: 626 [2021-12-16 00:59:59,867 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 112 SyntacticMatches, 2 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=205, Unknown=0, NotChecked=0, Total=240 [2021-12-16 00:59:59,868 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 11 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:59,868 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11 Valid, 282 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:59,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 626 states. [2021-12-16 00:59:59,897 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 626 to 626. [2021-12-16 00:59:59,898 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 626 states, 470 states have (on average 1.148936170212766) internal successors, (540), 498 states have internal predecessors, (540), 81 states have call successors, (81), 64 states have call predecessors, (81), 74 states have return successors, (103), 78 states have call predecessors, (103), 81 states have call successors, (103) [2021-12-16 00:59:59,900 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 626 states to 626 states and 724 transitions. [2021-12-16 00:59:59,900 INFO L78 Accepts]: Start accepts. Automaton has 626 states and 724 transitions. Word has length 99 [2021-12-16 00:59:59,900 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:59,901 INFO L470 AbstractCegarLoop]: Abstraction has 626 states and 724 transitions. [2021-12-16 00:59:59,901 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) [2021-12-16 00:59:59,901 INFO L276 IsEmpty]: Start isEmpty. Operand 626 states and 724 transitions. [2021-12-16 00:59:59,902 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2021-12-16 00:59:59,902 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:59,902 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:59,922 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-16 01:00:00,115 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2021-12-16 01:00:00,115 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 01:00:00,116 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 01:00:00,116 INFO L85 PathProgramCache]: Analyzing trace with hash 1686740425, now seen corresponding path program 1 times [2021-12-16 01:00:00,116 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 01:00:00,116 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [632034768] [2021-12-16 01:00:00,116 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:00:00,116 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 01:00:00,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:00,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 01:00:00,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:00,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 01:00:00,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:00,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 01:00:00,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:00,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 01:00:00,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:00,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:00:00,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:00,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-16 01:00:00,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:00,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2021-12-16 01:00:00,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:00,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 01:00:00,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:00,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-16 01:00:00,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:00,268 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 18 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-16 01:00:00,268 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 01:00:00,268 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [632034768] [2021-12-16 01:00:00,269 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [632034768] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 01:00:00,269 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [176145028] [2021-12-16 01:00:00,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 01:00:00,269 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:00:00,269 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 01:00:00,276 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 01:00:00,278 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-16 01:00:00,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 01:00:00,348 INFO L263 TraceCheckSpWp]: Trace formula consists of 482 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-16 01:00:00,350 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 01:00:00,527 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-12-16 01:00:00,527 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-16 01:00:00,816 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2021-12-16 01:00:00,817 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [176145028] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-16 01:00:00,817 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-16 01:00:00,817 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 9] total 22 [2021-12-16 01:00:00,817 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [538010444] [2021-12-16 01:00:00,817 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-16 01:00:00,817 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-12-16 01:00:00,817 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 01:00:00,818 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-12-16 01:00:00,818 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2021-12-16 01:00:00,818 INFO L87 Difference]: Start difference. First operand 626 states and 724 transitions. Second operand has 22 states, 22 states have (on average 6.454545454545454) internal successors, (142), 15 states have internal predecessors, (142), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) [2021-12-16 01:00:01,856 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 01:00:01,856 INFO L93 Difference]: Finished difference Result 1312 states and 1568 transitions. [2021-12-16 01:00:01,856 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2021-12-16 01:00:01,856 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 6.454545454545454) internal successors, (142), 15 states have internal predecessors, (142), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) Word has length 99 [2021-12-16 01:00:01,857 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 01:00:01,857 INFO L225 Difference]: With dead ends: 1312 [2021-12-16 01:00:01,857 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 01:00:01,862 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 280 GetRequests, 210 SyntacticMatches, 3 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1158 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=1065, Invalid=3627, Unknown=0, NotChecked=0, Total=4692 [2021-12-16 01:00:01,862 INFO L933 BasicCegarLoop]: 80 mSDtfsCounter, 912 mSDsluCounter, 569 mSDsCounter, 0 mSdLazyCounter, 1087 mSolverCounterSat, 470 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 914 SdHoareTripleChecker+Valid, 649 SdHoareTripleChecker+Invalid, 1557 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 470 IncrementalHoareTripleChecker+Valid, 1087 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-16 01:00:01,862 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [914 Valid, 649 Invalid, 1557 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [470 Valid, 1087 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-16 01:00:01,862 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 01:00:01,863 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 01:00:01,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 01:00:01,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 01:00:01,863 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 99 [2021-12-16 01:00:01,863 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 01:00:01,863 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 01:00:01,863 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 6.454545454545454) internal successors, (142), 15 states have internal predecessors, (142), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) [2021-12-16 01:00:01,863 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 01:00:01,863 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 01:00:01,866 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 01:00:01,883 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-16 01:00:02,083 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 01:00:02,085 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 01:00:06,355 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 720 726) no Hoare annotation was computed. [2021-12-16 01:00:06,355 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 720 726) the Hoare annotation is: true [2021-12-16 01:00:06,355 INFO L858 garLoopResultBuilder]: For program point L626-1(lines 622 633) no Hoare annotation was computed. [2021-12-16 01:00:06,356 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 622 633) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse3 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse6 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse5 (not (<= 1 ~pumpRunning~0))) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (not (<= ~waterLevel~0 2))) (.cse4 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse5 .cse2 .cse3 .cse4) (or .cse6 .cse0 .cse7 .cse2 .cse4) (or .cse6 .cse5 .cse7 .cse2 .cse4))) [2021-12-16 01:00:06,356 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 622 633) no Hoare annotation was computed. [2021-12-16 01:00:06,356 INFO L854 garLoopResultBuilder]: At program point L671(lines 666 674) the Hoare annotation is: (let ((.cse7 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0)) (.cse10 (<= ~waterLevel~0 1)) (.cse11 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse8 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse13 (= ~methaneLevelCritical~0 0)) (.cse12 (= ~pumpRunning~0 0))) (let ((.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (and .cse7 .cse10 .cse11 .cse8 .cse13 .cse12)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse13)) (.cse2 (not (= ~systemActive~0 1)))) (and (or (not (= |old(~waterLevel~0)| 1)) (= |timeShift_getWaterLevel_#res#1| 1) .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse2 .cse5) (or .cse3 .cse6 .cse0 (and .cse7 .cse8 (<= 1 ~pumpRunning~0)) .cse1 .cse2) (or .cse3 .cse4 .cse0 .cse2) (let ((.cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse3 (and .cse7 .cse9 .cse10 .cse11 .cse12) (and .cse7 .cse9 .cse10 .cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) .cse1 .cse2 .cse5)) (or .cse6 .cse0 .cse1 .cse2 (not (<= |old(~waterLevel~0)| 1)))))) [2021-12-16 01:00:06,356 INFO L854 garLoopResultBuilder]: At program point L828(lines 823 831) the Hoare annotation is: (let ((.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~systemActive~0 1)))) (and (or .cse0 (and (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0) (= ~waterLevel~0 |old(~waterLevel~0)|) (<= 1 ~pumpRunning~0) (not (= 0 |timeShift_isPumpRunning_#res#1|))) .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse3 .cse5) (or .cse0 .cse4 .cse1 .cse3) (or .cse0 .cse2 .cse3 .cse5) (or .cse1 .cse2 .cse3 (not (<= |old(~waterLevel~0)| 1))))) [2021-12-16 01:00:06,357 INFO L858 garLoopResultBuilder]: For program point L700-1(lines 699 718) no Hoare annotation was computed. [2021-12-16 01:00:06,357 INFO L858 garLoopResultBuilder]: For program point L762(lines 762 770) no Hoare annotation was computed. [2021-12-16 01:00:06,357 INFO L858 garLoopResultBuilder]: For program point L758(lines 758 775) no Hoare annotation was computed. [2021-12-16 01:00:06,357 INFO L858 garLoopResultBuilder]: For program point L73(lines 73 79) no Hoare annotation was computed. [2021-12-16 01:00:06,357 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 696 719) no Hoare annotation was computed. [2021-12-16 01:00:06,357 INFO L858 garLoopResultBuilder]: For program point L69(lines 69 82) no Hoare annotation was computed. [2021-12-16 01:00:06,358 INFO L854 garLoopResultBuilder]: At program point L69-1(lines 54 86) the Hoare annotation is: (let ((.cse5 (= ~systemActive~0 1)) (.cse0 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse4 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse17 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse18 (= ~methaneLevelCritical~0 0)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse6 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (not (<= |old(~waterLevel~0)| 1))) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse16 (not (<= 1 ~methaneLevelCritical~0))) (.cse15 (not (= 0 |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1|))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (and .cse0 .cse2 .cse3 .cse4 .cse17 .cse18 .cse9)) (.cse13 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not .cse18)) (.cse10 (not .cse5))) (and (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) .cse7 .cse8 (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse9) .cse10 .cse11) (or .cse12 .cse13 .cse8 .cse10 .cse14) (or .cse7 (and .cse15 .cse2 .cse9) .cse16 .cse10 (and .cse15 .cse2 .cse5 .cse6) .cse11) (or .cse1 .cse16 .cse10 .cse14 .cse11) (or .cse7 .cse16 .cse13 (and .cse15 .cse17 .cse9) .cse10) (or .cse7 .cse12 .cse13 (and .cse0 .cse17 (<= 1 ~pumpRunning~0)) .cse8 .cse10)))) [2021-12-16 01:00:06,358 INFO L854 garLoopResultBuilder]: At program point L61(line 61) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0 1)) (.cse6 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= ~systemActive~0 1)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and .cse11 .cse6 .cse14 .cse12 .cse13 .cse9)) (.cse3 (not (<= |old(~waterLevel~0)| 1))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not .cse14)) (.cse2 (not .cse13)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 (and .cse6 (<= 1 ~pumpRunning~0)) .cse7 .cse1 .cse8 .cse2) (or .cse5 (and .cse6 .cse9) .cse10 .cse7 .cse2) (or .cse7 .cse1 .cse8 .cse2 .cse3) (or .cse5 .cse10 (and .cse0 .cse11 .cse12) (and .cse0 .cse11 .cse9) .cse2 .cse4) (or .cse5 (and .cse11 .cse9) .cse1 .cse2 .cse4 (and .cse11 .cse12))))) [2021-12-16 01:00:06,358 INFO L858 garLoopResultBuilder]: For program point L61-1(line 61) no Hoare annotation was computed. [2021-12-16 01:00:06,358 INFO L858 garLoopResultBuilder]: For program point L602(lines 602 606) no Hoare annotation was computed. [2021-12-16 01:00:06,358 INFO L854 garLoopResultBuilder]: At program point L602-2(lines 598 609) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (and (<= ~waterLevel~0 1) (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse0 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= ~systemActive~0 1))) (.cse3 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse4 .cse6) (or .cse5 .cse7 .cse1 .cse2) (or .cse5 .cse8 .cse7 .cse2) (or .cse5 .cse8 .cse2 .cse6 .cse4) (or .cse0 .cse8 .cse2 .cse3 .cse4))) [2021-12-16 01:00:06,359 INFO L854 garLoopResultBuilder]: At program point L809(lines 804 811) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (and (<= ~waterLevel~0 |old(~waterLevel~0)|) (<= ~waterLevel~0 1) (= ~pumpRunning~0 0))) (.cse3 (not (= ~systemActive~0 1))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse3) (or .cse0 .cse6 .cse5 .cse3) (or .cse0 .cse6 .cse2 .cse3 .cse4))) [2021-12-16 01:00:06,359 INFO L854 garLoopResultBuilder]: At program point L768(line 768) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (and (<= ~waterLevel~0 1) (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse0 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= ~systemActive~0 1))) (.cse3 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse4 .cse6) (or .cse5 .cse7 .cse1 .cse2) (or .cse5 .cse8 .cse7 .cse2) (or .cse5 .cse8 .cse2 .cse6 .cse4) (or .cse0 .cse8 .cse2 .cse3 .cse4))) [2021-12-16 01:00:06,359 INFO L854 garLoopResultBuilder]: At program point L760(line 760) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= ~systemActive~0 1))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (not (<= |old(~waterLevel~0)| 1)) .cse3) (or .cse4 .cse1 .cse2 .cse3 (and .cse5 .cse6)) (or .cse4 .cse7 .cse1 .cse2) (or .cse4 .cse8 .cse7 .cse2) (or .cse4 .cse8 (and .cse0 .cse5 .cse6) .cse2 .cse3))) [2021-12-16 01:00:06,359 INFO L858 garLoopResultBuilder]: For program point L760-1(line 760) no Hoare annotation was computed. [2021-12-16 01:00:06,359 INFO L858 garLoopResultBuilder]: For program point L967(line 967) no Hoare annotation was computed. [2021-12-16 01:00:06,359 INFO L854 garLoopResultBuilder]: At program point L773(line 773) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse5 .cse2) (or .cse0 .cse4 .cse5 .cse6 .cse2) (or .cse0 .cse6 .cse2 .cse3))) [2021-12-16 01:00:06,359 INFO L854 garLoopResultBuilder]: At program point L773-1(lines 754 778) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0 1)) (.cse6 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= ~systemActive~0 1)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and .cse11 .cse6 .cse14 .cse12 .cse13 .cse9)) (.cse3 (not (<= |old(~waterLevel~0)| 1))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not .cse14)) (.cse2 (not .cse13)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 (and .cse6 (<= 1 ~pumpRunning~0)) .cse7 .cse1 .cse8 .cse2) (or .cse5 (and .cse6 .cse9) .cse10 .cse7 .cse2) (or .cse7 .cse1 .cse8 .cse2 .cse3) (or .cse5 .cse10 (and .cse0 .cse11 .cse12) (and .cse0 .cse11 .cse9) .cse2 .cse4) (or .cse5 (and .cse11 .cse9) .cse1 .cse2 .cse4 (and .cse11 .cse12))))) [2021-12-16 01:00:06,360 INFO L858 garLoopResultBuilder]: For program point L707-1(lines 707 713) no Hoare annotation was computed. [2021-12-16 01:00:06,360 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 83) no Hoare annotation was computed. [2021-12-16 01:00:06,360 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 696 719) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse1 (and .cse8 (= ~pumpRunning~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (and .cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~systemActive~0 1))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse3 .cse5 .cse4) (or .cse0 .cse6 .cse5 .cse4 .cse7) (or .cse0 .cse6 .cse2 .cse4 .cse7)))) [2021-12-16 01:00:06,360 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 696 719) no Hoare annotation was computed. [2021-12-16 01:00:06,360 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 967) no Hoare annotation was computed. [2021-12-16 01:00:06,361 INFO L854 garLoopResultBuilder]: At program point L968(lines 963 970) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse2) (or .cse0 .cse1 .cse4 .cse2) (or .cse0 .cse5 .cse2 .cse3))) [2021-12-16 01:00:06,361 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 494 523) no Hoare annotation was computed. [2021-12-16 01:00:06,361 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 494 523) the Hoare annotation is: true [2021-12-16 01:00:06,361 INFO L858 garLoopResultBuilder]: For program point L508(lines 508 512) no Hoare annotation was computed. [2021-12-16 01:00:06,361 INFO L861 garLoopResultBuilder]: At program point L508-1(lines 508 512) the Hoare annotation is: true [2021-12-16 01:00:06,361 INFO L858 garLoopResultBuilder]: For program point L505(line 505) no Hoare annotation was computed. [2021-12-16 01:00:06,361 INFO L861 garLoopResultBuilder]: At program point L504-2(lines 504 518) the Hoare annotation is: true [2021-12-16 01:00:06,362 INFO L861 garLoopResultBuilder]: At program point L500(line 500) the Hoare annotation is: true [2021-12-16 01:00:06,362 INFO L858 garLoopResultBuilder]: For program point L500-1(line 500) no Hoare annotation was computed. [2021-12-16 01:00:06,362 INFO L861 garLoopResultBuilder]: At program point L519(lines 494 523) the Hoare annotation is: true [2021-12-16 01:00:06,362 INFO L858 garLoopResultBuilder]: For program point L515(line 515) no Hoare annotation was computed. [2021-12-16 01:00:06,362 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 634 642) the Hoare annotation is: true [2021-12-16 01:00:06,362 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 634 642) no Hoare annotation was computed. [2021-12-16 01:00:06,362 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 634 642) no Hoare annotation was computed. [2021-12-16 01:00:06,362 INFO L858 garLoopResultBuilder]: For program point L944(lines 944 948) no Hoare annotation was computed. [2021-12-16 01:00:06,363 INFO L854 garLoopResultBuilder]: At program point L944-2(lines 936 949) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~4#1|)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~systemActive~0 1)) (.cse8 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse7 .cse6) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse8) (and .cse0 .cse2 .cse4 .cse5 .cse7 .cse6 .cse8))) [2021-12-16 01:00:06,363 INFO L858 garLoopResultBuilder]: For program point L907(lines 906 953) no Hoare annotation was computed. [2021-12-16 01:00:06,363 INFO L854 garLoopResultBuilder]: At program point L106(lines 102 108) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:00:06,363 INFO L858 garLoopResultBuilder]: For program point L936(lines 936 949) no Hoare annotation was computed. [2021-12-16 01:00:06,363 INFO L854 garLoopResultBuilder]: At program point L928(line 928) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~4#1|)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~systemActive~0 1)) (.cse8 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse7 .cse6) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse8) (and .cse0 .cse2 .cse4 .cse5 .cse7 .cse6 .cse8))) [2021-12-16 01:00:06,363 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 01:00:06,363 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 01:00:06,363 INFO L861 garLoopResultBuilder]: At program point L957(lines 896 961) the Hoare annotation is: true [2021-12-16 01:00:06,363 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 01:00:06,364 INFO L858 garLoopResultBuilder]: For program point L916(lines 916 922) no Hoare annotation was computed. [2021-12-16 01:00:06,364 INFO L858 garLoopResultBuilder]: For program point L916-1(lines 916 922) no Hoare annotation was computed. [2021-12-16 01:00:06,364 INFO L858 garLoopResultBuilder]: For program point L908(lines 908 912) no Hoare annotation was computed. [2021-12-16 01:00:06,364 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 01:00:06,365 INFO L854 garLoopResultBuilder]: At program point L892(lines 887 894) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~4#1|)) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~systemActive~0 1)) (.cse8 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse2 .cse3 .cse4 .cse5 .cse7 .cse6) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse8) (and .cse0 .cse2 .cse4 .cse5 .cse7 .cse6 .cse8))) [2021-12-16 01:00:06,365 INFO L854 garLoopResultBuilder]: At program point L954(lines 905 955) the Hoare annotation is: false [2021-12-16 01:00:06,365 INFO L861 garLoopResultBuilder]: At program point L566(lines 559 568) the Hoare annotation is: true [2021-12-16 01:00:06,365 INFO L858 garLoopResultBuilder]: For program point L579(lines 579 586) no Hoare annotation was computed. [2021-12-16 01:00:06,365 INFO L858 garLoopResultBuilder]: For program point L579-2(lines 579 586) no Hoare annotation was computed. [2021-12-16 01:00:06,365 INFO L858 garLoopResultBuilder]: For program point L926(lines 926 932) no Hoare annotation was computed. [2021-12-16 01:00:06,365 INFO L858 garLoopResultBuilder]: For program point L926-1(lines 926 932) no Hoare annotation was computed. [2021-12-16 01:00:06,366 INFO L854 garLoopResultBuilder]: At program point L121(lines 116 124) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:00:06,366 INFO L854 garLoopResultBuilder]: At program point L951(lines 906 953) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 1)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse8 (<= ~waterLevel~0 2)) (.cse4 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~4#1|)) (.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= ~systemActive~0 1)) (.cse9 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse8 .cse4 .cse6) (and .cse0 .cse1 .cse7 .cse2 .cse4 .cse6 .cse9) (and .cse0 .cse2 .cse8 .cse4 .cse5 .cse6 .cse9))) [2021-12-16 01:00:06,366 INFO L854 garLoopResultBuilder]: At program point L918(line 918) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0 1)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse9 (<= ~waterLevel~0 2)) (.cse7 (= ~systemActive~0 |ULTIMATE.start_main_~tmp~4#1|)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~systemActive~0 1)) (.cse5 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 (= 1 |ULTIMATE.start_main_~tmp~4#1|) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse3 .cse6 .cse7 .cse8 .cse4) (and .cse0 .cse2 .cse3 .cse6 .cse9 .cse7 .cse4) (and .cse0 .cse3 .cse9 .cse7 .cse8 .cse4 .cse5))) [2021-12-16 01:00:06,366 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:00:06,366 INFO L861 garLoopResultBuilder]: At program point L588(lines 569 591) the Hoare annotation is: true [2021-12-16 01:00:06,366 INFO L854 garLoopResultBuilder]: At program point L555(lines 551 557) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 |ULTIMATE.start_main_~tmp~4#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 01:00:06,367 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 610 621) no Hoare annotation was computed. [2021-12-16 01:00:06,367 INFO L858 garLoopResultBuilder]: For program point L614-1(lines 610 621) no Hoare annotation was computed. [2021-12-16 01:00:06,367 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 610 621) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (<= 1 ~pumpRunning~0))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse4 (not (= ~systemActive~0 1))) (.cse6 (not (<= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse2 .cse3 .cse4 .cse6) (or .cse0 .cse5 .cse7 .cse2 .cse4) (or .cse7 .cse1 .cse2 .cse4 .cse6))) [2021-12-16 01:00:06,367 INFO L854 garLoopResultBuilder]: At program point L684(lines 675 688) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse10 (<= ~waterLevel~0 1))) (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not .cse10)) (.cse1 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse10 .cse9)) (.cse5 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) .cse9)) (.cse6 (not (<= ~waterLevel~0 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 .cse6 .cse3 .cse4) (or .cse0 .cse7 .cse4 .cse8) (or .cse0 .cse2 .cse4 .cse8) (or .cse0 .cse1 .cse3 .cse7 .cse4) (or .cse1 .cse5 .cse6 .cse3 .cse7 .cse4)))) [2021-12-16 01:00:06,368 INFO L854 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse8 (<= ~waterLevel~0 1))) (let ((.cse0 (not .cse8)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~5#1| 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3) (or .cse5 .cse6 .cse7 .cse1 .cse2) (or .cse4 .cse5 .cse6 .cse7 .cse2)))) [2021-12-16 01:00:06,368 INFO L858 garLoopResultBuilder]: For program point L736(lines 736 744) no Hoare annotation was computed. [2021-12-16 01:00:06,368 INFO L858 garLoopResultBuilder]: For program point L732(lines 732 749) no Hoare annotation was computed. [2021-12-16 01:00:06,368 INFO L858 garLoopResultBuilder]: For program point L794(lines 794 800) no Hoare annotation was computed. [2021-12-16 01:00:06,369 INFO L854 garLoopResultBuilder]: At program point L792(line 792) the Hoare annotation is: (let ((.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~5#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= ~pumpRunning~0 0))) (.cse1 (not (<= ~waterLevel~0 2))) (.cse5 (not (<= ~waterLevel~0 1))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse3 .cse4 .cse6) (or .cse5 .cse7 .cse4 .cse6) (or .cse5 .cse2 .cse3 .cse4) (or .cse0 .cse7 .cse1 .cse2 .cse4) (or .cse5 .cse7 .cse2 .cse4))) [2021-12-16 01:00:06,369 INFO L854 garLoopResultBuilder]: At program point L794-2(lines 787 803) the Hoare annotation is: (let ((.cse0 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0)) (.cse1 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|)) (.cse2 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0)) (.cse4 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0)) (.cse3 (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~5#1|)) (.cse5 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|)) (.cse6 (not (<= ~waterLevel~0 2))) (.cse12 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (<= ~waterLevel~0 1))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= ~systemActive~0 1)))) (and (or (and .cse0 .cse1 .cse2 (<= 1 ~pumpRunning~0) .cse3 .cse4 .cse5) .cse6 .cse7 .cse8 .cse9) (or .cse10 (and .cse0 .cse1 .cse2 .cse4 .cse3 .cse5 (= ~pumpRunning~0 0)) .cse6 .cse7 .cse9) (or .cse11 .cse8 .cse9 .cse12) (or .cse11 .cse10 .cse9 .cse12) (or .cse11 .cse7 .cse8 .cse9) (or .cse11 .cse10 .cse7 .cse9))) [2021-12-16 01:00:06,369 INFO L858 garLoopResultBuilder]: For program point L792-1(line 792) no Hoare annotation was computed. [2021-12-16 01:00:06,369 INFO L854 garLoopResultBuilder]: At program point L883(lines 868 886) the Hoare annotation is: (let ((.cse10 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)) (.cse11 (<= ~waterLevel~0 1)) (.cse16 (= ~methaneLevelCritical~0 0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1|)) (.cse14 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)) (.cse15 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0))) (let ((.cse0 (and .cse10 .cse11 .cse16 .cse12 .cse13 .cse14 .cse15)) (.cse1 (not (<= ~waterLevel~0 2))) (.cse5 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= ~pumpRunning~0 0))) (.cse3 (not .cse16)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not .cse11)) (.cse7 (and .cse10 .cse11 .cse12 .cse13 .cse14 .cse15)) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse2 .cse3 .cse4) (or .cse7 .cse8 .cse1 .cse2 .cse4 .cse5) (or .cse6 .cse3 .cse4 .cse9) (or .cse6 .cse8 .cse4 .cse9) (or .cse6 .cse7 .cse8 .cse2 .cse4)))) [2021-12-16 01:00:06,369 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 728 752) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= ~waterLevel~0 1))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= ~systemActive~0 1))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse3 .cse4) (or .cse6 .cse7 .cse2 .cse3 .cse8) (or .cse6 .cse5 .cse7 .cse3 .cse8))) [2021-12-16 01:00:06,369 INFO L854 garLoopResultBuilder]: At program point L784(lines 779 786) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 2))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= ~waterLevel~0 1))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 ~pumpRunning~0) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~5#1|) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|)) .cse1 .cse2 .cse4 .cse3) (or .cse5 .cse4 .cse3 .cse6) (or .cse5 .cse0 .cse3 .cse6) (or .cse5 .cse2 .cse4 .cse3))) [2021-12-16 01:00:06,370 INFO L858 garLoopResultBuilder]: For program point L877(lines 877 881) no Hoare annotation was computed. [2021-12-16 01:00:06,370 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 728 752) no Hoare annotation was computed. [2021-12-16 01:00:06,370 INFO L858 garLoopResultBuilder]: For program point L877-2(lines 877 881) no Hoare annotation was computed. [2021-12-16 01:00:06,370 INFO L854 garLoopResultBuilder]: At program point L747(line 747) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= ~waterLevel~0 1))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= ~systemActive~0 1))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse5 .cse6 .cse4 .cse3 .cse7) (or .cse5 .cse0 .cse6 .cse3 .cse7))) [2021-12-16 01:00:06,370 INFO L858 garLoopResultBuilder]: For program point L747-1(lines 728 752) no Hoare annotation was computed. [2021-12-16 01:00:06,370 INFO L858 garLoopResultBuilder]: For program point L679(lines 679 685) no Hoare annotation was computed. [2021-12-16 01:00:06,370 INFO L861 garLoopResultBuilder]: At program point L817(line 817) the Hoare annotation is: true [2021-12-16 01:00:06,370 INFO L858 garLoopResultBuilder]: For program point L817-1(line 817) no Hoare annotation was computed. [2021-12-16 01:00:06,370 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 812 822) the Hoare annotation is: true [2021-12-16 01:00:06,371 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 812 822) no Hoare annotation was computed. [2021-12-16 01:00:06,371 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 812 822) no Hoare annotation was computed. [2021-12-16 01:00:06,373 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 01:00:06,374 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 01:00:06,422 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 01:00:06 BoogieIcfgContainer [2021-12-16 01:00:06,422 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 01:00:06,423 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 01:00:06,423 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 01:00:06,423 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 01:00:06,424 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:54" (3/4) ... [2021-12-16 01:00:06,431 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 01:00:06,436 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 01:00:06,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 01:00:06,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 01:00:06,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 01:00:06,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-16 01:00:06,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 01:00:06,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-16 01:00:06,437 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-16 01:00:06,447 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2021-12-16 01:00:06,448 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 01:00:06,448 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 01:00:06,448 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 01:00:06,448 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 01:00:06,449 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:00:06,449 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 01:00:06,465 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == 1) && pumpRunning == 0 [2021-12-16 01:00:06,465 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 [2021-12-16 01:00:06,465 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && waterLevel <= 1) && 1 == \result) && 1 <= pumpRunning) && systemActive == tmp) && 1 <= methaneLevelCritical) && systemActive == 1) || ((((((splverifierCounter == 0 && methaneLevelCritical == 0) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1)) || ((((((splverifierCounter == 0 && waterLevel <= 1) && methaneLevelCritical == 0) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 == \result) && waterLevel <= 2) && systemActive == tmp) && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0) [2021-12-16 01:00:06,466 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((waterLevel <= \old(waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) && ((((!(\old(waterLevel) <= 2) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) || (waterLevel <= 1 && pumpRunning == \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || (waterLevel <= 1 && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((waterLevel <= \old(waterLevel) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:00:06,467 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((waterLevel <= \old(waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (((((waterLevel <= 1 && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && systemActive == 1) && pumpRunning == 0)) || !(systemActive == 1))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((((waterLevel <= 1 && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && systemActive == 1) && pumpRunning == 0)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1))) && (((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || ((waterLevel <= \old(waterLevel) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || ((waterLevel <= \old(waterLevel) && waterLevel <= 1) && pumpRunning == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || (waterLevel <= 1 && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) || (waterLevel <= 1 && pumpRunning == \old(pumpRunning))) [2021-12-16 01:00:06,468 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((splverifierCounter == 0 && methaneLevelCritical == 0) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1) || ((((((splverifierCounter == 0 && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == tmp) && 1 <= methaneLevelCritical) && systemActive == 1)) || ((((((splverifierCounter == 0 && methaneLevelCritical == 0) && 1 == \result) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 == \result) && waterLevel <= 2) && systemActive == tmp) && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0) [2021-12-16 01:00:06,468 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((tmp == 0 && waterLevel <= \old(waterLevel)) && waterLevel <= 1) && tmp___0 <= 1) && \result <= 1) && systemActive == 1) && pumpRunning == 0) || !(\old(waterLevel) <= 2)) || !(methaneLevelCritical == 0)) || (((((tmp == 0 && waterLevel <= \old(waterLevel)) && waterLevel <= 1) && tmp___0 <= 1) && \result <= 1) && pumpRunning == \old(pumpRunning))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) && ((((((((((tmp == 0 && waterLevel <= 1) && tmp___0 <= 1) && \result <= 1) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1))) && (((((!(\old(waterLevel) <= 2) || ((!(0 == tmp) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || (((!(0 == tmp) && waterLevel <= 1) && systemActive == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((waterLevel <= \old(waterLevel) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((!(0 == tmp) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(systemActive == 1))) && (((((!(\old(waterLevel) <= 2) || ((((((tmp == 0 && waterLevel <= 1) && tmp___0 <= 1) && \result <= 1) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning))) || !(\old(pumpRunning) == 0)) || ((tmp == 0 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 01:00:06,468 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(waterLevel) <= 2) || !(methaneLevelCritical == 0)) || ((waterLevel <= \old(waterLevel) && waterLevel <= 1) && pumpRunning == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || ((waterLevel <= \old(waterLevel) && waterLevel <= 1) && pumpRunning == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:00:06,469 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(waterLevel) == 1) || \result == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || (((((tmp == 0 && waterLevel <= 1) && \result <= 1) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || ((tmp == 0 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((((!(\old(waterLevel) <= 2) || ((((tmp == 0 && waterLevel <= \old(waterLevel)) && waterLevel <= 1) && \result <= 1) && pumpRunning == 0)) || ((((tmp == 0 && waterLevel <= \old(waterLevel)) && waterLevel <= 1) && \result <= 1) && pumpRunning == \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((((((((tmp == 0 && waterLevel <= 1) && \result <= 1) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1)) [2021-12-16 01:00:06,469 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((tmp == 0 && 1 <= \result) && \result == 0) && 1 <= pumpRunning) && 1 <= tmp) && tmp == methaneLevelCritical) && 1 <= tmp___0) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((((!(1 <= methaneLevelCritical) || ((((((tmp == 0 && 1 <= \result) && \result == 0) && tmp == methaneLevelCritical) && 1 <= tmp) && 1 <= tmp___0) && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(waterLevel <= 1) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(waterLevel <= 1) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(waterLevel <= 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(waterLevel <= 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-16 01:00:06,469 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= methaneLevelCritical) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((((((((((tmp == 0 && 1 <= \result) && \result == 0) && 1 <= pumpRunning) && 1 <= tmp) && tmp == methaneLevelCritical) && 1 <= tmp___0) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(waterLevel <= 1) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(waterLevel <= 1) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(waterLevel <= 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 01:00:06,469 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(waterLevel <= 1) || ((1 <= \result && waterLevel <= 1) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((((((1 <= \result && waterLevel <= 1) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || (\result == 0 && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(waterLevel <= 1) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(waterLevel <= 1) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && ((((!(waterLevel <= 1) || ((1 <= \result && waterLevel <= 1) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((((((1 <= \result && waterLevel <= 1) && pumpRunning == 0) || (\result == 0 && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 01:00:06,469 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(waterLevel) <= 2) || (((tmp == 0 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && !(0 == \result))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1)) [2021-12-16 01:00:06,469 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 <= \result && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && 1 <= tmp) && \result == 0) && tmp___0 == 0) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || ((((tmp == 0 && 1 <= \result) && \result == 0) && 1 <= tmp___0) && pumpRunning == 0)) && ((((!(waterLevel <= 1) || ((((((1 <= \result && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && 1 <= tmp) && \result == 0) && tmp___0 == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((((((((1 <= \result && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= tmp) && \result == 0) && tmp___0 == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || ((((tmp == 0 && 1 <= \result) && \result == 0) && 1 <= tmp___0) && pumpRunning == 0))) && (((!(waterLevel <= 1) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(waterLevel <= 1) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && ((((!(waterLevel <= 1) || (((((1 <= \result && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= tmp) && \result == 0) && tmp___0 == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-16 01:00:06,470 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) [2021-12-16 01:00:06,495 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 01:00:06,496 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 01:00:06,496 INFO L158 Benchmark]: Toolchain (without parser) took 12563.78ms. Allocated memory was 92.3MB in the beginning and 161.5MB in the end (delta: 69.2MB). Free memory was 63.9MB in the beginning and 76.7MB in the end (delta: -12.8MB). Peak memory consumption was 54.6MB. Max. memory is 16.1GB. [2021-12-16 01:00:06,496 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 92.3MB. Free memory was 48.9MB in the beginning and 48.9MB in the end (delta: 43.6kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 01:00:06,497 INFO L158 Benchmark]: CACSL2BoogieTranslator took 349.15ms. Allocated memory is still 92.3MB. Free memory was 63.7MB in the beginning and 62.4MB in the end (delta: 1.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-16 01:00:06,497 INFO L158 Benchmark]: Boogie Procedure Inliner took 42.13ms. Allocated memory is still 92.3MB. Free memory was 62.1MB in the beginning and 60.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 01:00:06,497 INFO L158 Benchmark]: Boogie Preprocessor took 39.94ms. Allocated memory is still 92.3MB. Free memory was 59.6MB in the beginning and 58.2MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 01:00:06,497 INFO L158 Benchmark]: RCFGBuilder took 379.29ms. Allocated memory is still 92.3MB. Free memory was 58.2MB in the beginning and 41.9MB in the end (delta: 16.3MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2021-12-16 01:00:06,498 INFO L158 Benchmark]: TraceAbstraction took 11668.64ms. Allocated memory was 111.1MB in the beginning and 161.5MB in the end (delta: 50.3MB). Free memory was 88.9MB in the beginning and 83.0MB in the end (delta: 5.9MB). Peak memory consumption was 99.0MB. Max. memory is 16.1GB. [2021-12-16 01:00:06,498 INFO L158 Benchmark]: Witness Printer took 72.81ms. Allocated memory is still 161.5MB. Free memory was 83.0MB in the beginning and 76.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-16 01:00:06,501 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 92.3MB. Free memory was 48.9MB in the beginning and 48.9MB in the end (delta: 43.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 349.15ms. Allocated memory is still 92.3MB. Free memory was 63.7MB in the beginning and 62.4MB in the end (delta: 1.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 42.13ms. Allocated memory is still 92.3MB. Free memory was 62.1MB in the beginning and 60.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 39.94ms. Allocated memory is still 92.3MB. Free memory was 59.6MB in the beginning and 58.2MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 379.29ms. Allocated memory is still 92.3MB. Free memory was 58.2MB in the beginning and 41.9MB in the end (delta: 16.3MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 11668.64ms. Allocated memory was 111.1MB in the beginning and 161.5MB in the end (delta: 50.3MB). Free memory was 88.9MB in the beginning and 83.0MB in the end (delta: 5.9MB). Peak memory consumption was 99.0MB. Max. memory is 16.1GB. * Witness Printer took 72.81ms. Allocated memory is still 161.5MB. Free memory was 83.0MB in the beginning and 76.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 967]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 96 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.6s, OverallIterations: 14, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2913 SdHoareTripleChecker+Valid, 2.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2874 mSDsluCounter, 5529 SdHoareTripleChecker+Invalid, 1.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3963 mSDsCounter, 1182 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4230 IncrementalHoareTripleChecker+Invalid, 5412 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1182 mSolverCounterUnsat, 1566 mSDtfsCounter, 4230 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 723 GetRequests, 496 SyntacticMatches, 6 SemanticMatches, 221 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1650 ImplicationChecksByTransitivity, 1.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=802occurred in iteration=9, InterpolantAutomatonStates: 183, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 14 MinimizatonAttempts, 182 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 2708 PreInvPairs, 2965 NumberOfFragments, 3317 HoareAnnotationTreeSize, 2708 FomulaSimplifications, 338 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 44 FomulaSimplificationsInter, 13607 FormulaSimplificationTreeSizeReductionInter, 3.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 1063 NumberOfCodeBlocks, 1063 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1144 ConstructedInterpolants, 0 QuantifiedInterpolants, 2128 SizeOfPredicates, 9 NumberOfNonLiveVariables, 1350 ConjunctsInSsa, 34 ConjunctsInUnsatCore, 18 InterpolantComputations, 13 PerfectInterpolantSequences, 218/258 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((((((((((((((tmp == 0 && waterLevel <= \old(waterLevel)) && waterLevel <= 1) && tmp___0 <= 1) && \result <= 1) && systemActive == 1) && pumpRunning == 0) || !(\old(waterLevel) <= 2)) || !(methaneLevelCritical == 0)) || (((((tmp == 0 && waterLevel <= \old(waterLevel)) && waterLevel <= 1) && tmp___0 <= 1) && \result <= 1) && pumpRunning == \old(pumpRunning))) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) && ((((((((((tmp == 0 && waterLevel <= 1) && tmp___0 <= 1) && \result <= 1) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1))) && (((((!(\old(waterLevel) <= 2) || ((!(0 == tmp) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || (((!(0 == tmp) && waterLevel <= 1) && systemActive == 1) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && ((((waterLevel <= \old(waterLevel) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning)))) && ((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((!(0 == tmp) && waterLevel == \old(waterLevel)) && pumpRunning == \old(pumpRunning))) || !(systemActive == 1))) && (((((!(\old(waterLevel) <= 2) || ((((((tmp == 0 && waterLevel <= 1) && tmp___0 <= 1) && \result <= 1) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning))) || !(\old(pumpRunning) == 0)) || ((tmp == 0 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && waterLevel <= 1) && 1 == \result) && 1 <= pumpRunning) && systemActive == tmp) && 1 <= methaneLevelCritical) && systemActive == 1) || ((((((splverifierCounter == 0 && methaneLevelCritical == 0) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1)) || ((((((splverifierCounter == 0 && waterLevel <= 1) && methaneLevelCritical == 0) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 == \result) && waterLevel <= 2) && systemActive == tmp) && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0) - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: ((((((((waterLevel <= \old(waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) && ((((!(\old(waterLevel) <= 2) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) || (waterLevel <= 1 && pumpRunning == \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || (waterLevel <= 1 && pumpRunning == \old(pumpRunning))) || !(1 <= \old(pumpRunning)))) && ((((waterLevel <= \old(waterLevel) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 823]: Loop Invariant Derived loop invariant: (((((((!(\old(waterLevel) <= 2) || (((tmp == 0 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && !(0 == \result))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1)) - InvariantResult [Line: 868]: Loop Invariant Derived loop invariant: (((((((((((((((1 <= \result && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && 1 <= tmp) && \result == 0) && tmp___0 == 0) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || ((((tmp == 0 && 1 <= \result) && \result == 0) && 1 <= tmp___0) && pumpRunning == 0)) && ((((!(waterLevel <= 1) || ((((((1 <= \result && waterLevel <= 1) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && 1 <= tmp) && \result == 0) && tmp___0 == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((((((((1 <= \result && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= tmp) && \result == 0) && tmp___0 == 0) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) || ((((tmp == 0 && 1 <= \result) && \result == 0) && 1 <= tmp___0) && pumpRunning == 0))) && (((!(waterLevel <= 1) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(waterLevel <= 1) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && ((((!(waterLevel <= 1) || (((((1 <= \result && waterLevel <= 1) && pumpRunning == \old(pumpRunning)) && 1 <= tmp) && \result == 0) && tmp___0 == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 569]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 804]: Loop Invariant Derived loop invariant: ((((((!(\old(waterLevel) <= 2) || !(methaneLevelCritical == 0)) || ((waterLevel <= \old(waterLevel) && waterLevel <= 1) && pumpRunning == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || ((waterLevel <= \old(waterLevel) && waterLevel <= 1) && pumpRunning == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 504]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 551]: Loop Invariant Derived loop invariant: ((((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 779]: Loop Invariant Derived loop invariant: ((((((!(1 <= methaneLevelCritical) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((((((((((tmp == 0 && 1 <= \result) && \result == 0) && 1 <= pumpRunning) && 1 <= tmp) && tmp == methaneLevelCritical) && 1 <= tmp___0) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(waterLevel <= 1) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(waterLevel <= 1) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(waterLevel <= 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 675]: Loop Invariant Derived loop invariant: ((((((((!(waterLevel <= 1) || ((1 <= \result && waterLevel <= 1) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((((((1 <= \result && waterLevel <= 1) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || (\result == 0 && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(waterLevel <= 1) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(waterLevel <= 1) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && ((((!(waterLevel <= 1) || ((1 <= \result && waterLevel <= 1) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((((((1 <= \result && waterLevel <= 1) && pumpRunning == 0) || (\result == 0 && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 787]: Loop Invariant Derived loop invariant: ((((((((((((((tmp == 0 && 1 <= \result) && \result == 0) && 1 <= pumpRunning) && 1 <= tmp) && tmp == methaneLevelCritical) && 1 <= tmp___0) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((((!(1 <= methaneLevelCritical) || ((((((tmp == 0 && 1 <= \result) && \result == 0) && tmp == methaneLevelCritical) && 1 <= tmp) && 1 <= tmp___0) && pumpRunning == 0)) || !(waterLevel <= 2)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(waterLevel <= 1) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(waterLevel <= 1) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((!(waterLevel <= 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(waterLevel <= 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 666]: Loop Invariant Derived loop invariant: ((((((((!(\old(waterLevel) == 1) || \result == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || (((((tmp == 0 && waterLevel <= 1) && \result <= 1) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || ((tmp == 0 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((((!(\old(waterLevel) <= 2) || ((((tmp == 0 && waterLevel <= \old(waterLevel)) && waterLevel <= 1) && \result <= 1) && pumpRunning == 0)) || ((((tmp == 0 && waterLevel <= \old(waterLevel)) && waterLevel <= 1) && \result <= 1) && pumpRunning == \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((((((((tmp == 0 && waterLevel <= 1) && \result <= 1) && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1)) - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) && (((!(\old(waterLevel) <= 2) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((!(\old(waterLevel) <= 2) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 494]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 754]: Loop Invariant Derived loop invariant: ((((((((waterLevel <= \old(waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1)) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && 1 <= pumpRunning)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (((((waterLevel <= 1 && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && systemActive == 1) && pumpRunning == 0)) || !(systemActive == 1))) && ((((!(\old(waterLevel) <= 2) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((((waterLevel <= 1 && waterLevel == \old(waterLevel)) && methaneLevelCritical == 0) && pumpRunning == \old(pumpRunning)) && systemActive == 1) && pumpRunning == 0)) || !(systemActive == 1)) || !(\old(waterLevel) <= 1))) && (((((!(\old(waterLevel) <= 2) || !(1 <= methaneLevelCritical)) || ((waterLevel <= \old(waterLevel) && waterLevel <= 1) && pumpRunning == \old(pumpRunning))) || ((waterLevel <= \old(waterLevel) && waterLevel <= 1) && pumpRunning == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) <= 2) || (waterLevel <= 1 && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || !(1 <= \old(pumpRunning))) || (waterLevel <= 1 && pumpRunning == \old(pumpRunning))) - InvariantResult [Line: 887]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && methaneLevelCritical == 0) && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1) || ((((((splverifierCounter == 0 && 1 == \result) && 1 <= pumpRunning) && waterLevel <= 2) && systemActive == tmp) && 1 <= methaneLevelCritical) && systemActive == 1)) || ((((((splverifierCounter == 0 && methaneLevelCritical == 0) && 1 == \result) && waterLevel <= 2) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0)) || ((((((splverifierCounter == 0 && 1 == \result) && waterLevel <= 2) && systemActive == tmp) && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 RESULT: Ultimate proved your program to be correct! [2021-12-16 01:00:06,547 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE