./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:07:45,569 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:07:45,570 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:07:45,605 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:07:45,605 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:07:45,609 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:07:45,610 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:07:45,615 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:07:45,616 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:07:45,632 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:07:45,632 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:07:45,633 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:07:45,633 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:07:45,633 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:07:45,634 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:07:45,635 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:07:45,635 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:07:45,635 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:07:45,636 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:07:45,637 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:07:45,638 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:07:45,639 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:07:45,639 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:07:45,640 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:07:45,641 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:07:45,641 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:07:45,641 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:07:45,642 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:07:45,642 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:07:45,642 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:07:45,643 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:07:45,643 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:07:45,643 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:07:45,644 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:07:45,644 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:07:45,644 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:07:45,645 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:07:45,645 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:07:45,645 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:07:45,645 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:07:45,646 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:07:45,646 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:07:45,670 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:07:45,671 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:07:45,671 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:07:45,671 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:07:45,672 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:07:45,672 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:07:45,672 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:07:45,673 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:07:45,673 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:07:45,673 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:07:45,673 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:07:45,674 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:07:45,674 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:07:45,674 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:07:45,674 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:07:45,674 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:07:45,674 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:07:45,674 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:07:45,675 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:07:45,675 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:07:45,675 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:07:45,675 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:07:45,675 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:07:45,675 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:07:45,675 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:07:45,676 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:07:45,676 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:07:45,676 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:07:45,676 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:07:45,676 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:07:45,676 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:07:45,676 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:07:45,677 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:07:45,677 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:07:45,677 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 [2021-12-17 15:07:45,849 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:07:45,868 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:07:45,870 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:07:45,871 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:07:45,871 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:07:45,872 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2021-12-17 15:07:45,928 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/c26bc5085/4813228b2fbc48d79072f9c91d7e34ae/FLAG313d6d5fc [2021-12-17 15:07:46,376 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:07:46,378 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2021-12-17 15:07:46,389 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/c26bc5085/4813228b2fbc48d79072f9c91d7e34ae/FLAG313d6d5fc [2021-12-17 15:07:46,402 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/c26bc5085/4813228b2fbc48d79072f9c91d7e34ae [2021-12-17 15:07:46,417 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:07:46,418 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:07:46,419 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:07:46,419 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:07:46,422 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:07:46,423 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:07:46" (1/1) ... [2021-12-17 15:07:46,424 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@47ebf92 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:46, skipping insertion in model container [2021-12-17 15:07:46,424 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:07:46" (1/1) ... [2021-12-17 15:07:46,428 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:07:46,463 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:07:46,661 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2021-12-17 15:07:46,663 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:07:46,685 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:07:46,723 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2021-12-17 15:07:46,723 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:07:46,734 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:07:46,735 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:46 WrapperNode [2021-12-17 15:07:46,735 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:07:46,736 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:07:46,736 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:07:46,736 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:07:46,740 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:46" (1/1) ... [2021-12-17 15:07:46,749 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:46" (1/1) ... [2021-12-17 15:07:46,768 INFO L137 Inliner]: procedures = 58, calls = 160, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 280 [2021-12-17 15:07:46,768 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:07:46,769 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:07:46,769 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:07:46,769 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:07:46,776 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:46" (1/1) ... [2021-12-17 15:07:46,777 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:46" (1/1) ... [2021-12-17 15:07:46,788 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:46" (1/1) ... [2021-12-17 15:07:46,789 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:46" (1/1) ... [2021-12-17 15:07:46,797 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:46" (1/1) ... [2021-12-17 15:07:46,807 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:46" (1/1) ... [2021-12-17 15:07:46,810 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:46" (1/1) ... [2021-12-17 15:07:46,814 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:07:46,816 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:07:46,816 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:07:46,816 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:07:46,817 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:46" (1/1) ... [2021-12-17 15:07:46,822 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:07:46,831 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:07:46,841 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:07:46,850 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:07:46,868 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:07:46,869 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:07:46,869 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:07:46,869 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-17 15:07:46,869 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-17 15:07:46,869 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:07:46,869 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:07:46,869 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:07:46,870 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:07:46,870 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:07:46,870 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:07:46,870 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:07:46,870 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:07:46,870 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:07:46,870 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:07:46,870 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-17 15:07:46,871 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-17 15:07:46,871 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:07:46,871 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:07:46,871 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:07:46,871 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:07:46,871 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:07:46,927 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:07:46,928 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:07:47,110 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:07:47,115 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:07:47,115 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:07:47,116 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:07:47 BoogieIcfgContainer [2021-12-17 15:07:47,116 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:07:47,117 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:07:47,118 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:07:47,120 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:07:47,120 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:07:46" (1/3) ... [2021-12-17 15:07:47,120 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@76b2e1a2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:07:47, skipping insertion in model container [2021-12-17 15:07:47,120 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:46" (2/3) ... [2021-12-17 15:07:47,121 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@76b2e1a2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:07:47, skipping insertion in model container [2021-12-17 15:07:47,121 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:07:47" (3/3) ... [2021-12-17 15:07:47,122 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product54.cil.c [2021-12-17 15:07:47,126 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:07:47,127 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:07:47,208 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:07:47,216 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:07:47,219 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:07:47,234 INFO L276 IsEmpty]: Start isEmpty. Operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-17 15:07:47,247 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-17 15:07:47,247 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:47,248 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:47,248 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:47,252 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:47,252 INFO L85 PathProgramCache]: Analyzing trace with hash 244440816, now seen corresponding path program 1 times [2021-12-17 15:07:47,257 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:47,258 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1870554591] [2021-12-17 15:07:47,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:47,258 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:47,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:47,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:07:47,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:47,426 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:47,426 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:47,426 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1870554591] [2021-12-17 15:07:47,427 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1870554591] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:47,427 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:47,427 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:07:47,428 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1700428461] [2021-12-17 15:07:47,429 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:47,431 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:07:47,432 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:47,449 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:07:47,450 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:07:47,453 INFO L87 Difference]: Start difference. First operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:47,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:47,477 INFO L93 Difference]: Finished difference Result 197 states and 268 transitions. [2021-12-17 15:07:47,478 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:07:47,479 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-17 15:07:47,479 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:47,486 INFO L225 Difference]: With dead ends: 197 [2021-12-17 15:07:47,486 INFO L226 Difference]: Without dead ends: 94 [2021-12-17 15:07:47,489 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:07:47,491 INFO L933 BasicCegarLoop]: 131 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:47,492 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:47,507 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2021-12-17 15:07:47,540 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2021-12-17 15:07:47,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 69 states have (on average 1.318840579710145) internal successors, (91), 78 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-17 15:07:47,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 122 transitions. [2021-12-17 15:07:47,544 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 122 transitions. Word has length 25 [2021-12-17 15:07:47,544 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:47,544 INFO L470 AbstractCegarLoop]: Abstraction has 94 states and 122 transitions. [2021-12-17 15:07:47,544 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:47,544 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2021-12-17 15:07:47,546 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-17 15:07:47,546 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:47,546 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:47,546 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:07:47,547 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:47,547 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:47,547 INFO L85 PathProgramCache]: Analyzing trace with hash -1307515066, now seen corresponding path program 1 times [2021-12-17 15:07:47,547 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:47,548 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [67561256] [2021-12-17 15:07:47,548 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:47,548 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:47,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:47,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-17 15:07:47,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:47,626 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:47,627 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:47,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [67561256] [2021-12-17 15:07:47,627 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [67561256] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:47,627 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:47,627 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:07:47,628 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1489033682] [2021-12-17 15:07:47,628 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:47,628 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:07:47,629 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:47,629 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:07:47,629 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:47,629 INFO L87 Difference]: Start difference. First operand 94 states and 122 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:47,642 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:47,642 INFO L93 Difference]: Finished difference Result 152 states and 198 transitions. [2021-12-17 15:07:47,643 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:07:47,643 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-17 15:07:47,643 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:47,644 INFO L225 Difference]: With dead ends: 152 [2021-12-17 15:07:47,644 INFO L226 Difference]: Without dead ends: 85 [2021-12-17 15:07:47,645 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:47,646 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 13 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 201 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:47,646 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 201 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:47,647 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-12-17 15:07:47,652 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-12-17 15:07:47,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 72 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-17 15:07:47,654 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2021-12-17 15:07:47,654 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 26 [2021-12-17 15:07:47,654 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:47,654 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2021-12-17 15:07:47,654 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:47,655 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2021-12-17 15:07:47,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-12-17 15:07:47,656 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:47,656 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:47,656 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:07:47,656 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:47,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:47,656 INFO L85 PathProgramCache]: Analyzing trace with hash 1771610293, now seen corresponding path program 1 times [2021-12-17 15:07:47,657 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:47,657 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [474010959] [2021-12-17 15:07:47,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:47,657 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:47,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:47,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:07:47,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:47,701 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:47,702 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:47,702 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [474010959] [2021-12-17 15:07:47,702 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [474010959] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:47,702 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:47,702 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:07:47,702 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [523674803] [2021-12-17 15:07:47,702 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:47,703 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:07:47,703 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:47,703 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:07:47,703 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:47,703 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:47,722 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:47,722 INFO L93 Difference]: Finished difference Result 162 states and 213 transitions. [2021-12-17 15:07:47,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:07:47,722 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-12-17 15:07:47,723 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:47,723 INFO L225 Difference]: With dead ends: 162 [2021-12-17 15:07:47,723 INFO L226 Difference]: Without dead ends: 85 [2021-12-17 15:07:47,724 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:47,725 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 104 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:47,725 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [104 Valid, 108 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:47,726 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-12-17 15:07:47,732 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-12-17 15:07:47,747 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 72 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-17 15:07:47,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 109 transitions. [2021-12-17 15:07:47,748 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 109 transitions. Word has length 31 [2021-12-17 15:07:47,749 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:47,749 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 109 transitions. [2021-12-17 15:07:47,749 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:47,749 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2021-12-17 15:07:47,750 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-12-17 15:07:47,750 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:47,750 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:47,750 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:07:47,750 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:47,751 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:47,751 INFO L85 PathProgramCache]: Analyzing trace with hash 1359704802, now seen corresponding path program 1 times [2021-12-17 15:07:47,751 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:47,751 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [606275588] [2021-12-17 15:07:47,751 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:47,751 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:47,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:47,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:07:47,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:47,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:07:47,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:47,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-17 15:07:47,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:47,817 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:07:47,817 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:47,817 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [606275588] [2021-12-17 15:07:47,818 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [606275588] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:47,818 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:47,818 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-17 15:07:47,818 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [430748964] [2021-12-17 15:07:47,818 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:47,819 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-17 15:07:47,819 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:47,819 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-17 15:07:47,819 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-17 15:07:47,819 INFO L87 Difference]: Start difference. First operand 85 states and 109 transitions. Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-17 15:07:47,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:47,942 INFO L93 Difference]: Finished difference Result 242 states and 316 transitions. [2021-12-17 15:07:47,942 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:07:47,942 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 44 [2021-12-17 15:07:47,943 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:47,944 INFO L225 Difference]: With dead ends: 242 [2021-12-17 15:07:47,944 INFO L226 Difference]: Without dead ends: 165 [2021-12-17 15:07:47,945 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:07:47,946 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 150 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:47,946 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [156 Valid, 234 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:07:47,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2021-12-17 15:07:47,958 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 159. [2021-12-17 15:07:47,959 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 119 states have (on average 1.2941176470588236) internal successors, (154), 127 states have internal predecessors, (154), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2021-12-17 15:07:47,960 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 203 transitions. [2021-12-17 15:07:47,960 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 203 transitions. Word has length 44 [2021-12-17 15:07:47,960 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:47,960 INFO L470 AbstractCegarLoop]: Abstraction has 159 states and 203 transitions. [2021-12-17 15:07:47,961 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-17 15:07:47,961 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 203 transitions. [2021-12-17 15:07:47,962 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-12-17 15:07:47,962 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:47,962 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:47,962 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:07:47,962 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:47,963 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:47,963 INFO L85 PathProgramCache]: Analyzing trace with hash 179521665, now seen corresponding path program 1 times [2021-12-17 15:07:47,963 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:47,963 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [655996821] [2021-12-17 15:07:47,963 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:47,963 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:47,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:07:48,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:48,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-17 15:07:48,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,049 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:48,049 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:48,049 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [655996821] [2021-12-17 15:07:48,049 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [655996821] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:48,049 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:48,049 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:48,050 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [81954585] [2021-12-17 15:07:48,050 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:48,050 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:48,050 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:48,050 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:48,051 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:48,051 INFO L87 Difference]: Start difference. First operand 159 states and 203 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-17 15:07:48,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:48,180 INFO L93 Difference]: Finished difference Result 318 states and 414 transitions. [2021-12-17 15:07:48,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:07:48,182 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2021-12-17 15:07:48,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:48,185 INFO L225 Difference]: With dead ends: 318 [2021-12-17 15:07:48,185 INFO L226 Difference]: Without dead ends: 167 [2021-12-17 15:07:48,189 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:07:48,191 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 72 mSDsluCounter, 337 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 446 SdHoareTripleChecker+Invalid, 148 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:48,193 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [75 Valid, 446 Invalid, 148 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:07:48,195 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2021-12-17 15:07:48,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 162. [2021-12-17 15:07:48,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 122 states have (on average 1.2868852459016393) internal successors, (157), 130 states have internal predecessors, (157), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2021-12-17 15:07:48,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 206 transitions. [2021-12-17 15:07:48,212 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 206 transitions. Word has length 50 [2021-12-17 15:07:48,213 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:48,213 INFO L470 AbstractCegarLoop]: Abstraction has 162 states and 206 transitions. [2021-12-17 15:07:48,213 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-17 15:07:48,213 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 206 transitions. [2021-12-17 15:07:48,214 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-12-17 15:07:48,214 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:48,214 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:48,214 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:07:48,215 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:48,215 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:48,215 INFO L85 PathProgramCache]: Analyzing trace with hash 602223491, now seen corresponding path program 1 times [2021-12-17 15:07:48,215 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:48,216 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1056768609] [2021-12-17 15:07:48,216 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:48,216 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:48,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:07:48,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:48,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-17 15:07:48,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,314 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:48,315 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:48,315 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1056768609] [2021-12-17 15:07:48,315 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1056768609] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:48,315 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:48,315 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:48,315 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1005406613] [2021-12-17 15:07:48,316 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:48,316 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:48,316 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:48,316 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:48,317 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:48,317 INFO L87 Difference]: Start difference. First operand 162 states and 206 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-17 15:07:48,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:48,428 INFO L93 Difference]: Finished difference Result 326 states and 428 transitions. [2021-12-17 15:07:48,428 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-17 15:07:48,429 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2021-12-17 15:07:48,429 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:48,431 INFO L225 Difference]: With dead ends: 326 [2021-12-17 15:07:48,431 INFO L226 Difference]: Without dead ends: 172 [2021-12-17 15:07:48,432 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:07:48,433 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 168 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 333 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:48,437 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [171 Valid, 333 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:07:48,438 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2021-12-17 15:07:48,458 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 164. [2021-12-17 15:07:48,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 124 states have (on average 1.282258064516129) internal successors, (159), 132 states have internal predecessors, (159), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2021-12-17 15:07:48,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 208 transitions. [2021-12-17 15:07:48,460 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 208 transitions. Word has length 50 [2021-12-17 15:07:48,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:48,460 INFO L470 AbstractCegarLoop]: Abstraction has 164 states and 208 transitions. [2021-12-17 15:07:48,460 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-17 15:07:48,461 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 208 transitions. [2021-12-17 15:07:48,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-12-17 15:07:48,465 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:48,465 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:48,465 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:07:48,466 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:48,466 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:48,467 INFO L85 PathProgramCache]: Analyzing trace with hash -1203214843, now seen corresponding path program 1 times [2021-12-17 15:07:48,467 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:48,467 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [165712996] [2021-12-17 15:07:48,468 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:48,468 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:48,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:07:48,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:48,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-17 15:07:48,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,537 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:48,537 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:48,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [165712996] [2021-12-17 15:07:48,537 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [165712996] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:48,537 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:48,537 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-17 15:07:48,537 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1643114214] [2021-12-17 15:07:48,537 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:48,537 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:07:48,538 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:48,538 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:07:48,538 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-17 15:07:48,538 INFO L87 Difference]: Start difference. First operand 164 states and 208 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-17 15:07:48,706 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:48,706 INFO L93 Difference]: Finished difference Result 458 states and 602 transitions. [2021-12-17 15:07:48,707 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:07:48,707 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 50 [2021-12-17 15:07:48,707 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:48,708 INFO L225 Difference]: With dead ends: 458 [2021-12-17 15:07:48,709 INFO L226 Difference]: Without dead ends: 302 [2021-12-17 15:07:48,709 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:07:48,710 INFO L933 BasicCegarLoop]: 163 mSDtfsCounter, 221 mSDsluCounter, 203 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 228 SdHoareTripleChecker+Valid, 366 SdHoareTripleChecker+Invalid, 230 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:48,710 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [228 Valid, 366 Invalid, 230 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:07:48,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 302 states. [2021-12-17 15:07:48,719 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 302 to 294. [2021-12-17 15:07:48,720 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 221 states have (on average 1.257918552036199) internal successors, (278), 233 states have internal predecessors, (278), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2021-12-17 15:07:48,721 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 376 transitions. [2021-12-17 15:07:48,721 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 376 transitions. Word has length 50 [2021-12-17 15:07:48,721 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:48,721 INFO L470 AbstractCegarLoop]: Abstraction has 294 states and 376 transitions. [2021-12-17 15:07:48,722 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-17 15:07:48,722 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 376 transitions. [2021-12-17 15:07:48,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-12-17 15:07:48,723 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:48,723 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:48,723 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:07:48,723 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:48,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:48,723 INFO L85 PathProgramCache]: Analyzing trace with hash 1971090006, now seen corresponding path program 1 times [2021-12-17 15:07:48,724 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:48,724 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1488796129] [2021-12-17 15:07:48,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:48,724 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:48,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:07:48,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:48,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:48,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-17 15:07:48,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:48,770 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:48,770 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:48,770 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1488796129] [2021-12-17 15:07:48,770 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1488796129] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:48,770 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:48,771 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:07:48,771 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1954600688] [2021-12-17 15:07:48,771 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:48,771 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:07:48,771 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:48,771 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:07:48,772 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:07:48,772 INFO L87 Difference]: Start difference. First operand 294 states and 376 transitions. Second operand has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:07:48,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:48,959 INFO L93 Difference]: Finished difference Result 866 states and 1136 transitions. [2021-12-17 15:07:48,959 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-17 15:07:48,960 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2021-12-17 15:07:48,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:48,962 INFO L225 Difference]: With dead ends: 866 [2021-12-17 15:07:48,962 INFO L226 Difference]: Without dead ends: 580 [2021-12-17 15:07:48,963 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-17 15:07:48,964 INFO L933 BasicCegarLoop]: 94 mSDtfsCounter, 179 mSDsluCounter, 346 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 440 SdHoareTripleChecker+Invalid, 281 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:48,964 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [187 Valid, 440 Invalid, 281 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:07:48,965 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 580 states. [2021-12-17 15:07:48,983 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 580 to 560. [2021-12-17 15:07:48,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 560 states, 415 states have (on average 1.219277108433735) internal successors, (506), 438 states have internal predecessors, (506), 72 states have call successors, (72), 66 states have call predecessors, (72), 72 states have return successors, (129), 74 states have call predecessors, (129), 72 states have call successors, (129) [2021-12-17 15:07:48,986 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 560 states to 560 states and 707 transitions. [2021-12-17 15:07:48,986 INFO L78 Accepts]: Start accepts. Automaton has 560 states and 707 transitions. Word has length 52 [2021-12-17 15:07:48,986 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:48,986 INFO L470 AbstractCegarLoop]: Abstraction has 560 states and 707 transitions. [2021-12-17 15:07:48,986 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:07:48,986 INFO L276 IsEmpty]: Start isEmpty. Operand 560 states and 707 transitions. [2021-12-17 15:07:48,987 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-17 15:07:48,987 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:48,987 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:48,987 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:07:48,987 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:48,987 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:48,988 INFO L85 PathProgramCache]: Analyzing trace with hash 1067067282, now seen corresponding path program 1 times [2021-12-17 15:07:48,988 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:48,988 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326231814] [2021-12-17 15:07:48,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:48,988 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:48,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:07:49,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:07:49,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:49,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:49,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-17 15:07:49,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,043 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:49,043 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:49,043 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326231814] [2021-12-17 15:07:49,043 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1326231814] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:49,043 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:49,043 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:07:49,043 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [120880279] [2021-12-17 15:07:49,043 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:49,044 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:07:49,044 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:49,044 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:07:49,044 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:07:49,044 INFO L87 Difference]: Start difference. First operand 560 states and 707 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:07:49,325 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:49,325 INFO L93 Difference]: Finished difference Result 1128 states and 1437 transitions. [2021-12-17 15:07:49,326 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-17 15:07:49,326 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2021-12-17 15:07:49,327 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:49,329 INFO L225 Difference]: With dead ends: 1128 [2021-12-17 15:07:49,329 INFO L226 Difference]: Without dead ends: 576 [2021-12-17 15:07:49,331 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2021-12-17 15:07:49,332 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 205 mSDsluCounter, 145 mSDsCounter, 0 mSdLazyCounter, 357 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 240 SdHoareTripleChecker+Invalid, 439 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 357 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:49,332 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [207 Valid, 240 Invalid, 439 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 357 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:07:49,333 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 576 states. [2021-12-17 15:07:49,357 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 576 to 556. [2021-12-17 15:07:49,358 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 556 states, 411 states have (on average 1.2019464720194648) internal successors, (494), 434 states have internal predecessors, (494), 72 states have call successors, (72), 66 states have call predecessors, (72), 72 states have return successors, (129), 74 states have call predecessors, (129), 72 states have call successors, (129) [2021-12-17 15:07:49,360 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 556 states to 556 states and 695 transitions. [2021-12-17 15:07:49,361 INFO L78 Accepts]: Start accepts. Automaton has 556 states and 695 transitions. Word has length 56 [2021-12-17 15:07:49,361 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:49,361 INFO L470 AbstractCegarLoop]: Abstraction has 556 states and 695 transitions. [2021-12-17 15:07:49,361 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:07:49,361 INFO L276 IsEmpty]: Start isEmpty. Operand 556 states and 695 transitions. [2021-12-17 15:07:49,362 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-12-17 15:07:49,362 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:49,362 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:49,363 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-17 15:07:49,363 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:49,363 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:49,363 INFO L85 PathProgramCache]: Analyzing trace with hash 2127597403, now seen corresponding path program 1 times [2021-12-17 15:07:49,363 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:49,363 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [842040159] [2021-12-17 15:07:49,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:49,363 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:49,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:07:49,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:07:49,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-17 15:07:49,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:49,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-17 15:07:49,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,427 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:49,427 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:49,427 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [842040159] [2021-12-17 15:07:49,427 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [842040159] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:49,427 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:49,427 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:49,427 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1273780254] [2021-12-17 15:07:49,427 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:49,428 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:49,428 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:49,428 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:49,428 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:49,429 INFO L87 Difference]: Start difference. First operand 556 states and 695 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:07:49,752 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:49,752 INFO L93 Difference]: Finished difference Result 1084 states and 1428 transitions. [2021-12-17 15:07:49,752 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-17 15:07:49,752 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2021-12-17 15:07:49,752 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:49,756 INFO L225 Difference]: With dead ends: 1084 [2021-12-17 15:07:49,756 INFO L226 Difference]: Without dead ends: 1082 [2021-12-17 15:07:49,757 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2021-12-17 15:07:49,757 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 455 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 281 mSolverCounterSat, 243 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 456 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 524 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 243 IncrementalHoareTripleChecker+Valid, 281 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:49,757 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [456 Valid, 210 Invalid, 524 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [243 Valid, 281 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:07:49,758 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1082 states. [2021-12-17 15:07:49,784 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1082 to 842. [2021-12-17 15:07:49,785 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 842 states, 620 states have (on average 1.206451612903226) internal successors, (748), 664 states have internal predecessors, (748), 114 states have call successors, (114), 84 states have call predecessors, (114), 107 states have return successors, (244), 116 states have call predecessors, (244), 114 states have call successors, (244) [2021-12-17 15:07:49,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 842 states to 842 states and 1106 transitions. [2021-12-17 15:07:49,788 INFO L78 Accepts]: Start accepts. Automaton has 842 states and 1106 transitions. Word has length 58 [2021-12-17 15:07:49,789 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:49,789 INFO L470 AbstractCegarLoop]: Abstraction has 842 states and 1106 transitions. [2021-12-17 15:07:49,789 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:07:49,789 INFO L276 IsEmpty]: Start isEmpty. Operand 842 states and 1106 transitions. [2021-12-17 15:07:49,791 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2021-12-17 15:07:49,791 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:49,792 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:49,792 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-17 15:07:49,792 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:49,792 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:49,792 INFO L85 PathProgramCache]: Analyzing trace with hash -582322242, now seen corresponding path program 1 times [2021-12-17 15:07:49,792 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:49,792 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1015800371] [2021-12-17 15:07:49,792 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:49,793 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:49,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:07:49,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:07:49,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:07:49,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:07:49,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:49,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-17 15:07:49,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-12-17 15:07:49,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:49,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2021-12-17 15:07:49,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,889 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-17 15:07:49,889 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:49,889 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1015800371] [2021-12-17 15:07:49,889 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1015800371] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:07:49,889 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [753555293] [2021-12-17 15:07:49,889 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:49,889 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:07:49,889 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:07:49,892 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:07:49,931 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:07:49,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:49,995 INFO L263 TraceCheckSpWp]: Trace formula consists of 492 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-17 15:07:49,999 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:07:50,254 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:50,254 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-17 15:07:50,254 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [753555293] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:50,254 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-17 15:07:50,254 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2021-12-17 15:07:50,254 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [852639852] [2021-12-17 15:07:50,254 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:50,255 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:07:50,255 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:50,255 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:07:50,255 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:07:50,256 INFO L87 Difference]: Start difference. First operand 842 states and 1106 transitions. Second operand has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-17 15:07:50,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:50,301 INFO L93 Difference]: Finished difference Result 1458 states and 1956 transitions. [2021-12-17 15:07:50,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:07:50,302 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 102 [2021-12-17 15:07:50,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:50,304 INFO L225 Difference]: With dead ends: 1458 [2021-12-17 15:07:50,305 INFO L226 Difference]: Without dead ends: 730 [2021-12-17 15:07:50,307 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 120 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:07:50,308 INFO L933 BasicCegarLoop]: 152 mSDtfsCounter, 51 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:50,308 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [51 Valid, 222 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:50,309 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 730 states. [2021-12-17 15:07:50,334 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 730 to 730. [2021-12-17 15:07:50,335 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 730 states, 537 states have (on average 1.1824953445065176) internal successors, (635), 576 states have internal predecessors, (635), 99 states have call successors, (99), 77 states have call predecessors, (99), 93 states have return successors, (155), 99 states have call predecessors, (155), 99 states have call successors, (155) [2021-12-17 15:07:50,337 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 730 states to 730 states and 889 transitions. [2021-12-17 15:07:50,337 INFO L78 Accepts]: Start accepts. Automaton has 730 states and 889 transitions. Word has length 102 [2021-12-17 15:07:50,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:50,337 INFO L470 AbstractCegarLoop]: Abstraction has 730 states and 889 transitions. [2021-12-17 15:07:50,337 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-17 15:07:50,338 INFO L276 IsEmpty]: Start isEmpty. Operand 730 states and 889 transitions. [2021-12-17 15:07:50,342 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2021-12-17 15:07:50,342 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:50,343 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:50,369 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-17 15:07:50,555 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-17 15:07:50,555 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:50,556 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:50,556 INFO L85 PathProgramCache]: Analyzing trace with hash 1563413676, now seen corresponding path program 1 times [2021-12-17 15:07:50,556 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:50,556 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2028101835] [2021-12-17 15:07:50,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:50,556 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:50,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:50,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:07:50,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:50,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:07:50,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:50,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:07:50,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:50,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:07:50,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:50,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:50,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:50,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-17 15:07:50,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:50,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2021-12-17 15:07:50,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:50,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-17 15:07:50,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:50,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:07:50,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:50,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:50,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:50,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-17 15:07:50,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:50,664 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2021-12-17 15:07:50,664 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:50,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2028101835] [2021-12-17 15:07:50,664 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2028101835] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:07:50,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [630540862] [2021-12-17 15:07:50,664 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:50,664 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:07:50,664 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:07:50,665 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:07:50,666 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-17 15:07:50,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:50,745 INFO L263 TraceCheckSpWp]: Trace formula consists of 515 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-17 15:07:50,747 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:07:50,956 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-12-17 15:07:50,957 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-17 15:07:50,957 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [630540862] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:50,957 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-17 15:07:50,957 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2021-12-17 15:07:50,957 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [852241943] [2021-12-17 15:07:50,957 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:50,958 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:07:50,958 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:50,958 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:07:50,958 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2021-12-17 15:07:50,959 INFO L87 Difference]: Start difference. First operand 730 states and 889 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2021-12-17 15:07:51,053 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:51,053 INFO L93 Difference]: Finished difference Result 1315 states and 1596 transitions. [2021-12-17 15:07:51,054 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:07:51,054 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 112 [2021-12-17 15:07:51,054 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:51,054 INFO L225 Difference]: With dead ends: 1315 [2021-12-17 15:07:51,055 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:07:51,057 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2021-12-17 15:07:51,058 INFO L933 BasicCegarLoop]: 185 mSDtfsCounter, 46 mSDsluCounter, 687 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 872 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:51,058 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [47 Valid, 872 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:51,058 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:07:51,058 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:07:51,059 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:07:51,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:07:51,059 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 112 [2021-12-17 15:07:51,059 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:51,059 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:07:51,059 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2021-12-17 15:07:51,060 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:07:51,060 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:07:51,061 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:07:51,093 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-17 15:07:51,278 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-12-17 15:07:51,280 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:07:55,057 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 758 765) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2021-12-17 15:07:55,057 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 758 765) no Hoare annotation was computed. [2021-12-17 15:07:55,057 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 758 765) no Hoare annotation was computed. [2021-12-17 15:07:55,057 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 665 671) no Hoare annotation was computed. [2021-12-17 15:07:55,058 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 665 671) the Hoare annotation is: true [2021-12-17 15:07:55,058 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 896 907) the Hoare annotation is: (let ((.cse4 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse5 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse3 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse7 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 ~waterLevel~0))) (or .cse4 .cse5 .cse0 .cse6 .cse7) (or .cse4 .cse0 .cse2 .cse6 .cse7) (or .cse5 .cse0 .cse1 .cse3 .cse7))) [2021-12-17 15:07:55,058 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 896 907) no Hoare annotation was computed. [2021-12-17 15:07:55,058 INFO L858 garLoopResultBuilder]: For program point L900-1(lines 896 907) no Hoare annotation was computed. [2021-12-17 15:07:55,058 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 908 916) the Hoare annotation is: true [2021-12-17 15:07:55,058 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 908 916) no Hoare annotation was computed. [2021-12-17 15:07:55,058 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 908 916) no Hoare annotation was computed. [2021-12-17 15:07:55,058 INFO L858 garLoopResultBuilder]: For program point L733(lines 733 741) no Hoare annotation was computed. [2021-12-17 15:07:55,058 INFO L858 garLoopResultBuilder]: For program point L729(lines 729 746) no Hoare annotation was computed. [2021-12-17 15:07:55,059 INFO L858 garLoopResultBuilder]: For program point L180(lines 180 190) no Hoare annotation was computed. [2021-12-17 15:07:55,059 INFO L858 garLoopResultBuilder]: For program point L176(lines 176 193) no Hoare annotation was computed. [2021-12-17 15:07:55,059 INFO L854 garLoopResultBuilder]: At program point L176-1(lines 168 196) the Hoare annotation is: (let ((.cse4 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (<= 1 ~pumpRunning~0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse0 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse12 (and .cse4 (<= 1 |timeShift_processEnvironment_~tmp~8#1|) (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse5)) (.cse6 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse4 .cse5) .cse6 .cse7 .cse8 .cse9) (or (and .cse1 .cse2 .cse3) .cse6 .cse10 .cse7 (and .cse1 .cse4 .cse5) .cse9) (or (and .cse0 .cse4 .cse5) .cse6 (and .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4) .cse8 .cse11) (or (not (<= 2 |old(~waterLevel~0)|)) .cse12 .cse6 .cse10 .cse11) (or .cse12 .cse6 .cse10 .cse11 .cse9)))) [2021-12-17 15:07:55,059 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 641 664) no Hoare annotation was computed. [2021-12-17 15:07:55,059 INFO L854 garLoopResultBuilder]: At program point L771(line 771) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse4 .cse1 .cse3) (or .cse0 .cse5 .cse2 .cse6) (or .cse0 .cse4 (and .cse1 (= ~methAndRunningLastTime~0 0)) .cse3 .cse6) (or .cse0 .cse4 .cse5 .cse6))) [2021-12-17 15:07:55,059 INFO L858 garLoopResultBuilder]: For program point L771-1(line 771) no Hoare annotation was computed. [2021-12-17 15:07:55,059 INFO L858 garLoopResultBuilder]: For program point L181(lines 181 187) no Hoare annotation was computed. [2021-12-17 15:07:55,059 INFO L858 garLoopResultBuilder]: For program point L652-1(lines 652 658) no Hoare annotation was computed. [2021-12-17 15:07:55,059 INFO L854 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse0 .cse5 .cse1 .cse4) (or .cse0 .cse3 .cse5 .cse4) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse3 .cse2))) [2021-12-17 15:07:55,059 INFO L854 garLoopResultBuilder]: At program point L735(line 735) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) (.cse8 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse6 .cse4 .cse5) (or .cse0 .cse6 (and .cse1 (= ~methAndRunningLastTime~0 0) .cse7 .cse8) .cse3 .cse5) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse6 (and .cse1 .cse7 .cse8) .cse3))) [2021-12-17 15:07:55,059 INFO L858 garLoopResultBuilder]: For program point L1012(line 1012) no Hoare annotation was computed. [2021-12-17 15:07:55,060 INFO L854 garLoopResultBuilder]: At program point L174(line 174) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse13 (= ~pumpRunning~0 0))) (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (and (<= 1 |timeShift_processEnvironment_~tmp~8#1|) (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse13)) (.cse9 (<= 1 ~pumpRunning~0)) (.cse10 (<= 2 ~waterLevel~0)) (.cse11 (and .cse8 .cse13)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse12 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse6 .cse7 .cse4) (or (and .cse8 .cse9 .cse10 .cse7) .cse11 .cse0 .cse1 .cse6 .cse4) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2 .cse3) (or (and .cse8 .cse9 .cse10) .cse11 .cse0 .cse6 .cse12 .cse4) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13 .cse3) (or .cse5 .cse0 .cse6 .cse7 .cse12 .cse4)))) [2021-12-17 15:07:55,060 INFO L858 garLoopResultBuilder]: For program point L174-1(line 174) no Hoare annotation was computed. [2021-12-17 15:07:55,060 INFO L858 garLoopResultBuilder]: For program point L876(lines 876 880) no Hoare annotation was computed. [2021-12-17 15:07:55,060 INFO L854 garLoopResultBuilder]: At program point L876-2(lines 872 883) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse4 .cse1 .cse3) (or .cse0 .cse5 .cse2 .cse6) (or .cse0 .cse4 (and .cse1 (= ~methAndRunningLastTime~0 0)) .cse3 .cse6) (or .cse0 .cse4 .cse5 .cse6))) [2021-12-17 15:07:55,060 INFO L854 garLoopResultBuilder]: At program point L744(line 744) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse8 (= ~methAndRunningLastTime~0 0)) (.cse4 (= ~pumpRunning~0 0)) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2) (or (and .cse3 .cse4) .cse0 .cse5 .cse1 .cse6) (or .cse0 .cse7 .cse2 .cse6) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse5 .cse8 .cse1 .cse6) (or .cse0 .cse7 .cse5 (and .cse3 .cse8 .cse4) .cse6) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse7 .cse2))) [2021-12-17 15:07:55,060 INFO L854 garLoopResultBuilder]: At program point L744-1(lines 725 749) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse13 (= ~pumpRunning~0 0))) (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (and (<= 1 |timeShift_processEnvironment_~tmp~8#1|) (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse13)) (.cse9 (<= 1 ~pumpRunning~0)) (.cse10 (<= 2 ~waterLevel~0)) (.cse11 (and .cse8 .cse13)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse12 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse6 .cse7 .cse4) (or (and .cse8 .cse9 .cse10 .cse7) .cse11 .cse0 .cse1 .cse6 .cse4) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2 .cse3) (or (and .cse8 .cse9 .cse10) .cse11 .cse0 .cse6 .cse12 .cse4) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13 .cse3) (or .cse5 .cse0 .cse6 .cse7 .cse12 .cse4)))) [2021-12-17 15:07:55,060 INFO L854 garLoopResultBuilder]: At program point L773(lines 766 776) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1) .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse0 .cse6 .cse4) (or (not (<= 2 |old(~waterLevel~0)|)) .cse2 .cse3 (and .cse0 .cse1) .cse4) (or .cse2 .cse7 .cse6 .cse5) (or .cse2 .cse3 .cse7 .cse5))) [2021-12-17 15:07:55,060 INFO L858 garLoopResultBuilder]: For program point L645-1(lines 644 663) no Hoare annotation was computed. [2021-12-17 15:07:55,060 INFO L854 garLoopResultBuilder]: At program point L1013(lines 1008 1015) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse0 .cse5 .cse1 .cse4) (or .cse0 .cse3 .cse5 .cse4) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse3 .cse2))) [2021-12-17 15:07:55,060 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 641 664) the Hoare annotation is: (let ((.cse7 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse0 (and .cse5 .cse6)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse10 (and .cse5 .cse7 (= ~pumpRunning~0 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse4 .cse3) (or (and .cse5 .cse6 .cse7) .cse1 .cse4 .cse3 .cse8) (or .cse1 .cse4 .cse9 .cse10 .cse8) (or .cse1 .cse9 .cse2 .cse10 .cse8)))) [2021-12-17 15:07:55,060 INFO L854 garLoopResultBuilder]: At program point L782(lines 777 785) the Hoare annotation is: (let ((.cse9 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse10 (= ~pumpRunning~0 0))) (let ((.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse2 (and .cse9 (<= 1 |timeShift_processEnvironment_~tmp~8#1|) (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse10)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2 .cse3) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse4 .cse5 .cse6) (or .cse0 .cse7 .cse3) (or .cse0 .cse4 .cse7 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse6) (let ((.cse8 (= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse8 (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse5) .cse0 .cse1 (and .cse9 .cse8 .cse10) .cse4 .cse6))))) [2021-12-17 15:07:55,061 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 641 664) no Hoare annotation was computed. [2021-12-17 15:07:55,061 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1012) no Hoare annotation was computed. [2021-12-17 15:07:55,061 INFO L861 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2021-12-17 15:07:55,061 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2021-12-17 15:07:55,061 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2021-12-17 15:07:55,061 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2021-12-17 15:07:55,061 INFO L861 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2021-12-17 15:07:55,061 INFO L861 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2021-12-17 15:07:55,061 INFO L858 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2021-12-17 15:07:55,066 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2021-12-17 15:07:55,066 INFO L858 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2021-12-17 15:07:55,066 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-12-17 15:07:55,066 INFO L854 garLoopResultBuilder]: At program point L865(lines 860 867) the Hoare annotation is: (let ((.cse1 (<= 1 ~pumpRunning~0)) (.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~systemActive~0 1)) (.cse5 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3 .cse5) (and .cse0 .cse6 .cse1 .cse3) (and .cse0 .cse1 .cse4 .cse2 .cse3) (and .cse0 .cse6 .cse4 .cse3 .cse5))) [2021-12-17 15:07:55,066 INFO L858 garLoopResultBuilder]: For program point L576(lines 575 622) no Hoare annotation was computed. [2021-12-17 15:07:55,066 INFO L861 garLoopResultBuilder]: At program point L126(lines 118 128) the Hoare annotation is: true [2021-12-17 15:07:55,066 INFO L858 garLoopResultBuilder]: For program point L605(lines 605 618) no Hoare annotation was computed. [2021-12-17 15:07:55,066 INFO L861 garLoopResultBuilder]: At program point L151(lines 132 154) the Hoare annotation is: true [2021-12-17 15:07:55,066 INFO L854 garLoopResultBuilder]: At program point L597(line 597) the Hoare annotation is: (let ((.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse1 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~systemActive~0 1)) (.cse5 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3 .cse5) (and .cse0 .cse6 .cse1 .cse4 .cse3) (and .cse0 .cse6 .cse4 .cse3 .cse5))) [2021-12-17 15:07:55,066 INFO L861 garLoopResultBuilder]: At program point L626(lines 565 630) the Hoare annotation is: true [2021-12-17 15:07:55,067 INFO L858 garLoopResultBuilder]: For program point L585(lines 585 591) no Hoare annotation was computed. [2021-12-17 15:07:55,067 INFO L858 garLoopResultBuilder]: For program point L585-1(lines 585 591) no Hoare annotation was computed. [2021-12-17 15:07:55,067 INFO L858 garLoopResultBuilder]: For program point L577(lines 577 581) no Hoare annotation was computed. [2021-12-17 15:07:55,067 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:07:55,067 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:07:55,067 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:07:55,067 INFO L854 garLoopResultBuilder]: At program point L623(lines 574 624) the Hoare annotation is: false [2021-12-17 15:07:55,067 INFO L854 garLoopResultBuilder]: At program point L1003(lines 998 1006) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:55,067 INFO L854 garLoopResultBuilder]: At program point L165(lines 160 167) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:55,068 INFO L854 garLoopResultBuilder]: At program point L995(lines 991 997) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:55,068 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:07:55,068 INFO L858 garLoopResultBuilder]: For program point L595(lines 595 601) no Hoare annotation was computed. [2021-12-17 15:07:55,068 INFO L858 garLoopResultBuilder]: For program point L595-1(lines 595 601) no Hoare annotation was computed. [2021-12-17 15:07:55,068 INFO L854 garLoopResultBuilder]: At program point L620(lines 575 622) the Hoare annotation is: (let ((.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse1 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~systemActive~0 1)) (.cse5 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3 .cse5) (and .cse0 .cse6 .cse1 .cse4 .cse3) (and .cse0 .cse6 .cse4 .cse3 .cse5))) [2021-12-17 15:07:55,068 INFO L854 garLoopResultBuilder]: At program point L587(line 587) the Hoare annotation is: (let ((.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse1 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~systemActive~0 1)) (.cse5 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3 .cse5) (and .cse0 .cse6 .cse1 .cse4 .cse3) (and .cse0 .cse6 .cse4 .cse3 .cse5))) [2021-12-17 15:07:55,068 INFO L854 garLoopResultBuilder]: At program point L988(lines 984 990) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:55,068 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~methAndRunningLastTime~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:55,068 INFO L858 garLoopResultBuilder]: For program point L142(lines 142 149) no Hoare annotation was computed. [2021-12-17 15:07:55,068 INFO L858 garLoopResultBuilder]: For program point L142-2(lines 142 149) no Hoare annotation was computed. [2021-12-17 15:07:55,068 INFO L858 garLoopResultBuilder]: For program point L613(lines 613 617) no Hoare annotation was computed. [2021-12-17 15:07:55,069 INFO L854 garLoopResultBuilder]: At program point L613-2(lines 605 618) the Hoare annotation is: (let ((.cse1 (<= 1 ~pumpRunning~0)) (.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse3 (= ~systemActive~0 1)) (.cse5 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3 .cse5) (and .cse0 .cse6 .cse1 .cse3) (and .cse0 .cse1 .cse4 .cse2 .cse3) (and .cse0 .cse6 .cse4 .cse3 .cse5))) [2021-12-17 15:07:55,069 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 673 697) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 (not (= ~methAndRunningLastTime~0 0)) .cse3))) [2021-12-17 15:07:55,069 INFO L854 garLoopResultBuilder]: At program point L958(lines 949 962) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (and (<= 2 ~waterLevel~0) .cse5)) (.cse1 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse5)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse4 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse1 .cse2 .cse3 .cse4)))) [2021-12-17 15:07:55,069 INFO L854 garLoopResultBuilder]: At program point L692(line 692) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2021-12-17 15:07:55,069 INFO L858 garLoopResultBuilder]: For program point L692-1(lines 673 697) no Hoare annotation was computed. [2021-12-17 15:07:55,069 INFO L854 garLoopResultBuilder]: At program point L837(lines 822 840) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (and (<= 2 ~waterLevel~0) .cse5)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= ~systemActive~0 1) .cse5))) (and (or .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse2 .cse0 .cse3 .cse4 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0)) .cse4)))) [2021-12-17 15:07:55,069 INFO L858 garLoopResultBuilder]: For program point L831(lines 831 835) no Hoare annotation was computed. [2021-12-17 15:07:55,069 INFO L858 garLoopResultBuilder]: For program point L831-2(lines 831 835) no Hoare annotation was computed. [2021-12-17 15:07:55,069 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 673 697) no Hoare annotation was computed. [2021-12-17 15:07:55,069 INFO L858 garLoopResultBuilder]: For program point L953(lines 953 959) no Hoare annotation was computed. [2021-12-17 15:07:55,070 INFO L854 garLoopResultBuilder]: At program point L755(lines 750 757) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse2 .cse0 .cse3 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))))) [2021-12-17 15:07:55,070 INFO L854 garLoopResultBuilder]: At program point L687(line 687) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse4)) (.cse2 (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse2 .cse3 .cse1)))) [2021-12-17 15:07:55,070 INFO L858 garLoopResultBuilder]: For program point L681(lines 681 689) no Hoare annotation was computed. [2021-12-17 15:07:55,070 INFO L858 garLoopResultBuilder]: For program point L677(lines 677 694) no Hoare annotation was computed. [2021-12-17 15:07:55,070 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 884 895) no Hoare annotation was computed. [2021-12-17 15:07:55,070 INFO L858 garLoopResultBuilder]: For program point L888-1(lines 884 895) no Hoare annotation was computed. [2021-12-17 15:07:55,070 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 884 895) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse3 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (not (= ~methAndRunningLastTime~0 0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse3 .cse5) (or .cse4 .cse0 .cse3 .cse5 .cse6) (or .cse0 .cse2 .cse3 .cse5 .cse6))) [2021-12-17 15:07:55,070 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 699 723) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 (not (= ~methAndRunningLastTime~0 0)) .cse3))) [2021-12-17 15:07:55,070 INFO L854 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2021-12-17 15:07:55,070 INFO L854 garLoopResultBuilder]: At program point L709(line 709) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2021-12-17 15:07:55,071 INFO L858 garLoopResultBuilder]: For program point L707(lines 707 715) no Hoare annotation was computed. [2021-12-17 15:07:55,071 INFO L858 garLoopResultBuilder]: For program point L703(lines 703 720) no Hoare annotation was computed. [2021-12-17 15:07:55,071 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 699 723) no Hoare annotation was computed. [2021-12-17 15:07:55,071 INFO L854 garLoopResultBuilder]: At program point L856(lines 841 859) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2021-12-17 15:07:55,071 INFO L858 garLoopResultBuilder]: For program point L850(lines 850 854) no Hoare annotation was computed. [2021-12-17 15:07:55,071 INFO L858 garLoopResultBuilder]: For program point L850-2(lines 850 854) no Hoare annotation was computed. [2021-12-17 15:07:55,071 INFO L854 garLoopResultBuilder]: At program point L718(line 718) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 .cse2 .cse1 .cse3) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0)) .cse3))) [2021-12-17 15:07:55,071 INFO L858 garLoopResultBuilder]: For program point L718-1(lines 699 723) no Hoare annotation was computed. [2021-12-17 15:07:55,071 INFO L854 garLoopResultBuilder]: At program point L968(lines 963 971) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|))) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2021-12-17 15:07:55,073 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:55,074 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:07:55,101 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:07:55 BoogieIcfgContainer [2021-12-17 15:07:55,101 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:07:55,102 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:07:55,102 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:07:55,102 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:07:55,102 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:07:47" (3/4) ... [2021-12-17 15:07:55,104 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:07:55,108 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-17 15:07:55,109 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:07:55,109 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:07:55,109 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-17 15:07:55,109 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:07:55,109 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:07:55,109 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:07:55,109 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:07:55,110 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-12-17 15:07:55,115 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2021-12-17 15:07:55,115 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:07:55,116 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:07:55,116 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:07:55,116 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:07:55,117 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:07:55,117 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:07:55,132 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-17 15:07:55,132 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || methAndRunningLastTime == 0) || !(\old(methAndRunningLastTime) == 0))) && ((((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && methAndRunningLastTime == 0) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(1 == systemActive) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-17 15:07:55,133 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((tmp == 0 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && 2 <= waterLevel) && methAndRunningLastTime == 0) || (((tmp == 0 && waterLevel == \old(waterLevel)) && methAndRunningLastTime == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0)) && (((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && methAndRunningLastTime == 0) && pumpRunning == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((((tmp == 0 && methAndRunningLastTime == 0) && pumpRunning == 0) || !(1 == systemActive)) || ((tmp == 0 && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || (((methAndRunningLastTime == 0 && 1 <= tmp) && 1 <= \result) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning)))) && (((((((methAndRunningLastTime == 0 && 1 <= tmp) && 1 <= \result) && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) [2021-12-17 15:07:55,133 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) && (((!(1 == systemActive) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-17 15:07:55,133 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((\result == 0 && 1 <= tmp) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || methAndRunningLastTime == 0) || !(\old(methAndRunningLastTime) == 0))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (((\result == 0 && 1 <= tmp) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && ((((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) [2021-12-17 15:07:55,134 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) [2021-12-17 15:07:55,134 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((2 <= waterLevel && pumpRunning == 0) || (1 <= \result && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((2 <= waterLevel && pumpRunning == 0) || (1 <= \result && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) [2021-12-17 15:07:55,134 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) [2021-12-17 15:07:55,134 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) [2021-12-17 15:07:55,134 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || (((\result == 0 && tmp___0 == 0) && systemActive == 1) && pumpRunning == 0)) || !(methaneLevelCritical == 0))) && ((((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) || (((\result == 0 && tmp___0 == 0) && systemActive == 1) && pumpRunning == 0)) [2021-12-17 15:07:55,135 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((1 <= pumpRunning && 2 <= waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((1 <= pumpRunning && 2 <= waterLevel) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) [2021-12-17 15:07:55,149 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:07:55,149 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:07:55,150 INFO L158 Benchmark]: Toolchain (without parser) took 8731.95ms. Allocated memory was 104.9MB in the beginning and 207.6MB in the end (delta: 102.8MB). Free memory was 77.8MB in the beginning and 121.3MB in the end (delta: -43.5MB). Peak memory consumption was 59.7MB. Max. memory is 16.1GB. [2021-12-17 15:07:55,150 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 75.5MB. Free memory is still 40.2MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:07:55,150 INFO L158 Benchmark]: CACSL2BoogieTranslator took 316.24ms. Allocated memory is still 104.9MB. Free memory was 77.7MB in the beginning and 70.8MB in the end (delta: 6.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-17 15:07:55,150 INFO L158 Benchmark]: Boogie Procedure Inliner took 32.79ms. Allocated memory is still 104.9MB. Free memory was 70.6MB in the beginning and 68.2MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:07:55,159 INFO L158 Benchmark]: Boogie Preprocessor took 46.26ms. Allocated memory is still 104.9MB. Free memory was 68.2MB in the beginning and 66.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:07:55,160 INFO L158 Benchmark]: RCFGBuilder took 300.58ms. Allocated memory is still 104.9MB. Free memory was 66.5MB in the beginning and 49.6MB in the end (delta: 17.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-17 15:07:55,160 INFO L158 Benchmark]: TraceAbstraction took 7983.77ms. Allocated memory was 104.9MB in the beginning and 207.6MB in the end (delta: 102.8MB). Free memory was 49.0MB in the beginning and 128.6MB in the end (delta: -79.7MB). Peak memory consumption was 72.7MB. Max. memory is 16.1GB. [2021-12-17 15:07:55,161 INFO L158 Benchmark]: Witness Printer took 47.81ms. Allocated memory is still 207.6MB. Free memory was 128.6MB in the beginning and 121.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-17 15:07:55,162 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 75.5MB. Free memory is still 40.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 316.24ms. Allocated memory is still 104.9MB. Free memory was 77.7MB in the beginning and 70.8MB in the end (delta: 6.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 32.79ms. Allocated memory is still 104.9MB. Free memory was 70.6MB in the beginning and 68.2MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 46.26ms. Allocated memory is still 104.9MB. Free memory was 68.2MB in the beginning and 66.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 300.58ms. Allocated memory is still 104.9MB. Free memory was 66.5MB in the beginning and 49.6MB in the end (delta: 17.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 7983.77ms. Allocated memory was 104.9MB in the beginning and 207.6MB in the end (delta: 102.8MB). Free memory was 49.0MB in the beginning and 128.6MB in the end (delta: -79.7MB). Peak memory consumption was 72.7MB. Max. memory is 16.1GB. * Witness Printer took 47.81ms. Allocated memory is still 207.6MB. Free memory was 128.6MB in the beginning and 121.3MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1012]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 103 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.9s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.8s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1698 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1664 mSDsluCounter, 3803 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2335 mSDsCounter, 571 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1405 IncrementalHoareTripleChecker+Invalid, 1976 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 571 mSolverCounterUnsat, 1468 mSDtfsCounter, 1405 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 427 GetRequests, 336 SyntacticMatches, 1 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 134 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=842occurred in iteration=10, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 307 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 48 LocationsWithAnnotation, 1750 PreInvPairs, 1949 NumberOfFragments, 2840 HoareAnnotationTreeSize, 1750 FomulaSimplifications, 1467 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 48 FomulaSimplificationsInter, 15114 FormulaSimplificationTreeSizeReductionInter, 3.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 870 NumberOfCodeBlocks, 870 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 856 ConstructedInterpolants, 0 QuantifiedInterpolants, 1563 SizeOfPredicates, 5 NumberOfNonLiveVariables, 1007 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 14 InterpolantComputations, 12 PerfectInterpolantSequences, 150/161 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: (((((((splverifierCounter == 0 && 1 <= pumpRunning) && 2 <= waterLevel) && 1 <= methaneLevelCritical) && systemActive == 1) || ((((splverifierCounter == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0)) || (((splverifierCounter == 0 && methaneLevelCritical == 0) && 1 <= pumpRunning) && systemActive == 1)) || ((((splverifierCounter == 0 && 1 <= pumpRunning) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && systemActive == 1)) || ((((splverifierCounter == 0 && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0) - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 998]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 574]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) && (((!(1 == systemActive) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: ((((((splverifierCounter == 0 && 1 <= pumpRunning) && 2 <= waterLevel) && 1 <= methaneLevelCritical) && systemActive == 1) || ((((splverifierCounter == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0)) || ((((splverifierCounter == 0 && methaneLevelCritical == 0) && 1 <= pumpRunning) && methAndRunningLastTime == 0) && systemActive == 1)) || ((((splverifierCounter == 0 && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0) - InvariantResult [Line: 984]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: ((((((((((((tmp == 0 && waterLevel == \old(waterLevel)) && 1 <= pumpRunning) && 2 <= waterLevel) && methAndRunningLastTime == 0) || (((tmp == 0 && waterLevel == \old(waterLevel)) && methAndRunningLastTime == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0)) && (((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((waterLevel == \old(waterLevel) && methAndRunningLastTime == 0) && pumpRunning == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((((tmp == 0 && methAndRunningLastTime == 0) && pumpRunning == 0) || !(1 == systemActive)) || ((tmp == 0 && pumpRunning == \old(pumpRunning)) && methAndRunningLastTime == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && ((((!(2 <= \old(waterLevel)) || (((methAndRunningLastTime == 0 && 1 <= tmp) && 1 <= \result) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning)))) && (((((((methAndRunningLastTime == 0 && 1 <= tmp) && 1 <= \result) && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || pumpRunning == \old(pumpRunning)) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 949]: Loop Invariant Derived loop invariant: (((((((2 <= waterLevel && pumpRunning == 0) || (1 <= \result && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((((2 <= waterLevel && pumpRunning == 0) || (1 <= \result && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 1008]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(pumpRunning))) - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: (((((((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || methAndRunningLastTime == 0) || !(\old(methAndRunningLastTime) == 0))) && ((((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && methAndRunningLastTime == 0) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning)))) && (((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(1 == systemActive) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) || !(1 <= \old(pumpRunning)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || methAndRunningLastTime == 0) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && methAndRunningLastTime == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 750]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && ((((1 <= pumpRunning && 2 <= waterLevel) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((1 <= pumpRunning && 2 <= waterLevel) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 777]: Loop Invariant Derived loop invariant: ((((((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((\result == 0 && 1 <= tmp) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || methAndRunningLastTime == 0) || !(\old(methAndRunningLastTime) == 0))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning)))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(\old(methAndRunningLastTime) == 0))) && ((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (((\result == 0 && 1 <= tmp) && 1 <= \result) && pumpRunning == 0)) || !(1 <= \old(pumpRunning))) || !(\old(methAndRunningLastTime) == 0))) && ((((((((waterLevel == \old(waterLevel) && 1 <= pumpRunning) && 2 <= waterLevel) && methAndRunningLastTime == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(1 <= \old(pumpRunning))) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || (((\result == 0 && tmp___0 == 0) && systemActive == 1) && pumpRunning == 0)) || !(methaneLevelCritical == 0))) && ((((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(methAndRunningLastTime == 0)) || (((\result == 0 && tmp___0 == 0) && systemActive == 1) && pumpRunning == 0)) RESULT: Ultimate proved your program to be correct! [2021-12-17 15:07:55,203 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE