./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:14:53,683 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:14:53,685 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:14:53,737 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:14:53,738 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:14:53,739 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:14:53,742 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:14:53,744 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:14:53,745 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:14:53,746 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:14:53,747 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:14:53,748 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:14:53,748 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:14:53,749 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:14:53,751 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:14:53,752 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:14:53,756 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:14:53,758 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:14:53,760 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:14:53,762 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:14:53,766 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:14:53,770 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:14:53,771 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:14:53,772 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:14:53,774 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:14:53,777 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:14:53,777 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:14:53,778 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:14:53,779 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:14:53,780 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:14:53,780 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:14:53,781 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:14:53,782 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:14:53,783 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:14:53,784 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:14:53,784 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:14:53,785 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:14:53,785 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:14:53,786 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:14:53,786 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:14:53,787 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:14:53,789 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:14:53,819 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:14:53,819 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:14:53,820 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:14:53,820 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:14:53,820 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:14:53,821 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:14:53,822 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:14:53,822 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:14:53,822 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:14:53,822 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:14:53,823 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:14:53,823 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:14:53,823 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:14:53,823 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:14:53,824 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:14:53,824 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:14:53,824 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:14:53,824 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:14:53,824 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:14:53,824 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:14:53,825 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:14:53,825 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:14:53,825 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:14:53,825 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:14:53,825 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:14:53,826 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:14:53,826 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:14:53,826 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:14:53,826 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:14:53,826 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:14:53,826 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:14:53,827 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:14:53,827 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:14:53,827 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:14:53,827 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 [2021-12-21 13:14:54,075 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:14:54,098 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:14:54,114 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:14:54,115 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:14:54,116 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:14:54,117 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2021-12-21 13:14:54,181 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/97ce29af4/3c53555eb4d948459e4b0a013f3bc17d/FLAG603e83b5a [2021-12-21 13:14:54,687 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:14:54,688 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2021-12-21 13:14:54,714 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/97ce29af4/3c53555eb4d948459e4b0a013f3bc17d/FLAG603e83b5a [2021-12-21 13:14:55,026 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/97ce29af4/3c53555eb4d948459e4b0a013f3bc17d [2021-12-21 13:14:55,028 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:14:55,033 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:14:55,035 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:14:55,035 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:14:55,040 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:14:55,041 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:14:55" (1/1) ... [2021-12-21 13:14:55,042 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@391948e5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:55, skipping insertion in model container [2021-12-21 13:14:55,042 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:14:55" (1/1) ... [2021-12-21 13:14:55,049 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:14:55,098 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:14:55,423 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2021-12-21 13:14:55,426 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:14:55,432 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:14:55,525 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2021-12-21 13:14:55,529 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:14:55,544 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:14:55,544 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:55 WrapperNode [2021-12-21 13:14:55,545 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:14:55,546 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:14:55,546 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:14:55,546 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:14:55,552 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:55" (1/1) ... [2021-12-21 13:14:55,580 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:55" (1/1) ... [2021-12-21 13:14:55,609 INFO L137 Inliner]: procedures = 58, calls = 160, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 280 [2021-12-21 13:14:55,615 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:14:55,616 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:14:55,616 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:14:55,616 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:14:55,624 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:55" (1/1) ... [2021-12-21 13:14:55,624 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:55" (1/1) ... [2021-12-21 13:14:55,631 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:55" (1/1) ... [2021-12-21 13:14:55,632 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:55" (1/1) ... [2021-12-21 13:14:55,646 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:55" (1/1) ... [2021-12-21 13:14:55,658 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:55" (1/1) ... [2021-12-21 13:14:55,660 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:55" (1/1) ... [2021-12-21 13:14:55,666 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:14:55,667 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:14:55,669 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:14:55,669 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:14:55,670 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:55" (1/1) ... [2021-12-21 13:14:55,676 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:14:55,687 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:14:55,700 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:14:55,725 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:14:55,741 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:14:55,741 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:14:55,742 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:14:55,742 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-21 13:14:55,742 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-21 13:14:55,742 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:14:55,742 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:14:55,742 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:14:55,742 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:14:55,743 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:14:55,743 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:14:55,743 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:14:55,743 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:14:55,743 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-21 13:14:55,743 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2021-12-21 13:14:55,744 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-21 13:14:55,744 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-21 13:14:55,744 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:14:55,744 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:14:55,744 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:14:55,745 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:14:55,745 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:14:55,831 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:14:55,833 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:14:56,133 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:14:56,140 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:14:56,140 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:14:56,144 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:14:56 BoogieIcfgContainer [2021-12-21 13:14:56,145 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:14:56,146 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:14:56,146 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:14:56,152 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:14:56,152 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:14:55" (1/3) ... [2021-12-21 13:14:56,153 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7a3e0a4c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:14:56, skipping insertion in model container [2021-12-21 13:14:56,153 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:55" (2/3) ... [2021-12-21 13:14:56,154 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7a3e0a4c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:14:56, skipping insertion in model container [2021-12-21 13:14:56,154 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:14:56" (3/3) ... [2021-12-21 13:14:56,155 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product54.cil.c [2021-12-21 13:14:56,159 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:14:56,160 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:14:56,200 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:14:56,207 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:14:56,208 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:14:56,239 INFO L276 IsEmpty]: Start isEmpty. Operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-21 13:14:56,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-21 13:14:56,246 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:56,247 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:56,248 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:56,251 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:56,252 INFO L85 PathProgramCache]: Analyzing trace with hash 244440816, now seen corresponding path program 1 times [2021-12-21 13:14:56,259 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:56,260 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [82914938] [2021-12-21 13:14:56,260 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:56,261 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:56,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:56,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-21 13:14:56,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:56,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:56,530 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:56,530 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [82914938] [2021-12-21 13:14:56,531 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [82914938] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:56,531 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:56,531 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:14:56,533 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2001297263] [2021-12-21 13:14:56,534 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:56,537 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:14:56,538 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:56,566 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:14:56,567 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:14:56,571 INFO L87 Difference]: Start difference. First operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:56,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:56,627 INFO L93 Difference]: Finished difference Result 197 states and 268 transitions. [2021-12-21 13:14:56,629 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:14:56,630 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-21 13:14:56,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:56,641 INFO L225 Difference]: With dead ends: 197 [2021-12-21 13:14:56,642 INFO L226 Difference]: Without dead ends: 94 [2021-12-21 13:14:56,647 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:14:56,650 INFO L933 BasicCegarLoop]: 131 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:56,651 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:56,664 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2021-12-21 13:14:56,695 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2021-12-21 13:14:56,696 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 69 states have (on average 1.318840579710145) internal successors, (91), 78 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-21 13:14:56,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 122 transitions. [2021-12-21 13:14:56,712 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 122 transitions. Word has length 25 [2021-12-21 13:14:56,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:56,713 INFO L470 AbstractCegarLoop]: Abstraction has 94 states and 122 transitions. [2021-12-21 13:14:56,714 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:56,714 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2021-12-21 13:14:56,718 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-21 13:14:56,718 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:56,719 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:56,719 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:14:56,720 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:56,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:56,724 INFO L85 PathProgramCache]: Analyzing trace with hash -1307515066, now seen corresponding path program 1 times [2021-12-21 13:14:56,724 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:56,724 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1968129691] [2021-12-21 13:14:56,725 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:56,725 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:56,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:56,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 13:14:56,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:56,804 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:56,804 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:56,804 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1968129691] [2021-12-21 13:14:56,805 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1968129691] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:56,805 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:56,805 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:14:56,805 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1427468227] [2021-12-21 13:14:56,806 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:56,807 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:14:56,807 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:56,807 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:14:56,808 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:56,808 INFO L87 Difference]: Start difference. First operand 94 states and 122 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:56,824 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:56,824 INFO L93 Difference]: Finished difference Result 152 states and 198 transitions. [2021-12-21 13:14:56,827 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:14:56,827 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-21 13:14:56,828 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:56,829 INFO L225 Difference]: With dead ends: 152 [2021-12-21 13:14:56,829 INFO L226 Difference]: Without dead ends: 85 [2021-12-21 13:14:56,833 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:56,835 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 13 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 201 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:56,837 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 201 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:56,838 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-12-21 13:14:56,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-12-21 13:14:56,846 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 72 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-21 13:14:56,847 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2021-12-21 13:14:56,847 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 26 [2021-12-21 13:14:56,850 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:56,851 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2021-12-21 13:14:56,851 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:56,851 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2021-12-21 13:14:56,852 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-12-21 13:14:56,852 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:56,853 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:56,853 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:14:56,853 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:56,854 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:56,855 INFO L85 PathProgramCache]: Analyzing trace with hash 1771610293, now seen corresponding path program 1 times [2021-12-21 13:14:56,855 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:56,856 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2027035778] [2021-12-21 13:14:56,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:56,856 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:56,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:56,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:14:56,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:56,948 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:56,949 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:56,949 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2027035778] [2021-12-21 13:14:56,949 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2027035778] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:56,949 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:56,950 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:14:56,950 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1774847454] [2021-12-21 13:14:56,950 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:56,950 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:14:56,951 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:56,951 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:14:56,951 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:14:56,952 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:57,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:57,026 INFO L93 Difference]: Finished difference Result 162 states and 213 transitions. [2021-12-21 13:14:57,027 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:14:57,027 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-12-21 13:14:57,028 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:57,029 INFO L225 Difference]: With dead ends: 162 [2021-12-21 13:14:57,029 INFO L226 Difference]: Without dead ends: 85 [2021-12-21 13:14:57,030 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:57,031 INFO L933 BasicCegarLoop]: 103 mSDtfsCounter, 137 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 275 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:57,031 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [137 Valid, 275 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:57,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-12-21 13:14:57,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-12-21 13:14:57,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 72 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-21 13:14:57,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 109 transitions. [2021-12-21 13:14:57,049 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 109 transitions. Word has length 31 [2021-12-21 13:14:57,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:57,050 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 109 transitions. [2021-12-21 13:14:57,050 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:57,050 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2021-12-21 13:14:57,052 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2021-12-21 13:14:57,055 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:57,055 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:57,056 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:14:57,056 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:57,057 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:57,059 INFO L85 PathProgramCache]: Analyzing trace with hash 1359704802, now seen corresponding path program 1 times [2021-12-21 13:14:57,059 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:57,059 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1155029948] [2021-12-21 13:14:57,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:57,060 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:57,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:57,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:14:57,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:57,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-21 13:14:57,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:57,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-21 13:14:57,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:57,157 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:14:57,157 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:57,157 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1155029948] [2021-12-21 13:14:57,157 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1155029948] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:57,158 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:57,158 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-21 13:14:57,158 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1359129951] [2021-12-21 13:14:57,158 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:57,159 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-21 13:14:57,159 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:57,159 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-21 13:14:57,160 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-21 13:14:57,160 INFO L87 Difference]: Start difference. First operand 85 states and 109 transitions. Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-21 13:14:57,338 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:57,338 INFO L93 Difference]: Finished difference Result 242 states and 316 transitions. [2021-12-21 13:14:57,338 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:14:57,339 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 44 [2021-12-21 13:14:57,341 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:57,343 INFO L225 Difference]: With dead ends: 242 [2021-12-21 13:14:57,343 INFO L226 Difference]: Without dead ends: 165 [2021-12-21 13:14:57,344 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:14:57,345 INFO L933 BasicCegarLoop]: 116 mSDtfsCounter, 150 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:57,346 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [156 Valid, 234 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:14:57,347 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2021-12-21 13:14:57,363 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 159. [2021-12-21 13:14:57,364 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 119 states have (on average 1.2941176470588236) internal successors, (154), 127 states have internal predecessors, (154), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2021-12-21 13:14:57,365 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 203 transitions. [2021-12-21 13:14:57,366 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 203 transitions. Word has length 44 [2021-12-21 13:14:57,366 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:57,366 INFO L470 AbstractCegarLoop]: Abstraction has 159 states and 203 transitions. [2021-12-21 13:14:57,366 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2021-12-21 13:14:57,366 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 203 transitions. [2021-12-21 13:14:57,368 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-12-21 13:14:57,368 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:57,368 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:57,368 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:14:57,368 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:57,369 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:57,369 INFO L85 PathProgramCache]: Analyzing trace with hash 179521665, now seen corresponding path program 1 times [2021-12-21 13:14:57,369 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:57,369 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [415729161] [2021-12-21 13:14:57,370 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:57,383 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:57,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:57,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:14:57,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:57,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:14:57,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:57,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-21 13:14:57,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:57,502 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:57,502 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:57,502 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [415729161] [2021-12-21 13:14:57,503 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [415729161] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:57,507 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:57,507 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:14:57,507 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [792876000] [2021-12-21 13:14:57,508 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:57,509 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:14:57,510 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:57,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:14:57,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:14:57,511 INFO L87 Difference]: Start difference. First operand 159 states and 203 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:14:57,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:57,680 INFO L93 Difference]: Finished difference Result 318 states and 414 transitions. [2021-12-21 13:14:57,680 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:14:57,680 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2021-12-21 13:14:57,681 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:57,684 INFO L225 Difference]: With dead ends: 318 [2021-12-21 13:14:57,684 INFO L226 Difference]: Without dead ends: 167 [2021-12-21 13:14:57,686 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:14:57,693 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 70 mSDsluCounter, 337 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 447 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:57,694 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [73 Valid, 447 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:14:57,696 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2021-12-21 13:14:57,714 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 162. [2021-12-21 13:14:57,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 122 states have (on average 1.2868852459016393) internal successors, (157), 130 states have internal predecessors, (157), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2021-12-21 13:14:57,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 206 transitions. [2021-12-21 13:14:57,721 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 206 transitions. Word has length 50 [2021-12-21 13:14:57,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:57,723 INFO L470 AbstractCegarLoop]: Abstraction has 162 states and 206 transitions. [2021-12-21 13:14:57,723 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:14:57,724 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 206 transitions. [2021-12-21 13:14:57,729 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-12-21 13:14:57,729 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:57,729 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:57,730 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:14:57,731 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:57,731 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:57,731 INFO L85 PathProgramCache]: Analyzing trace with hash 602223491, now seen corresponding path program 1 times [2021-12-21 13:14:57,731 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:57,732 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1496916998] [2021-12-21 13:14:57,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:57,733 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:57,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:57,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:14:57,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:57,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:14:57,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:57,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-21 13:14:57,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:57,802 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:57,803 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:57,803 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1496916998] [2021-12-21 13:14:57,803 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1496916998] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:57,803 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:57,803 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:14:57,803 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2109641948] [2021-12-21 13:14:57,804 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:57,804 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:14:57,804 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:57,805 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:14:57,805 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:14:57,805 INFO L87 Difference]: Start difference. First operand 162 states and 206 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:14:57,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:57,912 INFO L93 Difference]: Finished difference Result 326 states and 428 transitions. [2021-12-21 13:14:57,913 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:14:57,913 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2021-12-21 13:14:57,913 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:57,915 INFO L225 Difference]: With dead ends: 326 [2021-12-21 13:14:57,915 INFO L226 Difference]: Without dead ends: 172 [2021-12-21 13:14:57,916 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:57,916 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 73 mSDsluCounter, 238 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:57,917 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 349 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:14:57,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2021-12-21 13:14:57,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 164. [2021-12-21 13:14:57,929 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 124 states have (on average 1.282258064516129) internal successors, (159), 132 states have internal predecessors, (159), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2021-12-21 13:14:57,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 208 transitions. [2021-12-21 13:14:57,931 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 208 transitions. Word has length 50 [2021-12-21 13:14:57,931 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:57,931 INFO L470 AbstractCegarLoop]: Abstraction has 164 states and 208 transitions. [2021-12-21 13:14:57,931 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:14:57,932 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 208 transitions. [2021-12-21 13:14:57,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-12-21 13:14:57,933 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:57,933 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:57,933 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:14:57,933 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:57,934 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:57,934 INFO L85 PathProgramCache]: Analyzing trace with hash -1203214843, now seen corresponding path program 1 times [2021-12-21 13:14:57,934 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:57,934 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1856632958] [2021-12-21 13:14:57,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:57,934 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:57,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:14:58,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:14:58,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-21 13:14:58,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,038 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:58,038 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:58,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1856632958] [2021-12-21 13:14:58,039 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1856632958] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:58,039 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:58,039 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:14:58,039 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1290776979] [2021-12-21 13:14:58,040 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:58,040 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:14:58,040 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:58,041 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:14:58,041 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:14:58,041 INFO L87 Difference]: Start difference. First operand 164 states and 208 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-21 13:14:58,272 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:58,272 INFO L93 Difference]: Finished difference Result 458 states and 602 transitions. [2021-12-21 13:14:58,273 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:14:58,273 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 50 [2021-12-21 13:14:58,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:58,275 INFO L225 Difference]: With dead ends: 458 [2021-12-21 13:14:58,275 INFO L226 Difference]: Without dead ends: 302 [2021-12-21 13:14:58,276 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:58,277 INFO L933 BasicCegarLoop]: 163 mSDtfsCounter, 221 mSDsluCounter, 203 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 228 SdHoareTripleChecker+Valid, 366 SdHoareTripleChecker+Invalid, 230 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:58,277 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [228 Valid, 366 Invalid, 230 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:14:58,278 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 302 states. [2021-12-21 13:14:58,300 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 302 to 294. [2021-12-21 13:14:58,301 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 221 states have (on average 1.257918552036199) internal successors, (278), 233 states have internal predecessors, (278), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2021-12-21 13:14:58,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 376 transitions. [2021-12-21 13:14:58,303 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 376 transitions. Word has length 50 [2021-12-21 13:14:58,303 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:58,303 INFO L470 AbstractCegarLoop]: Abstraction has 294 states and 376 transitions. [2021-12-21 13:14:58,303 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-21 13:14:58,303 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 376 transitions. [2021-12-21 13:14:58,304 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2021-12-21 13:14:58,304 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:58,304 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:58,305 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:14:58,311 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:58,312 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:58,312 INFO L85 PathProgramCache]: Analyzing trace with hash 1971090006, now seen corresponding path program 1 times [2021-12-21 13:14:58,312 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:58,312 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [763410268] [2021-12-21 13:14:58,312 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:58,313 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:58,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:14:58,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:14:58,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:58,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2021-12-21 13:14:58,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,380 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:58,380 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:58,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [763410268] [2021-12-21 13:14:58,380 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [763410268] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:58,380 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:58,380 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:14:58,381 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1589795452] [2021-12-21 13:14:58,381 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:58,381 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:14:58,381 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:58,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:14:58,382 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:58,382 INFO L87 Difference]: Start difference. First operand 294 states and 376 transitions. Second operand has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:14:58,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:58,692 INFO L93 Difference]: Finished difference Result 866 states and 1136 transitions. [2021-12-21 13:14:58,693 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-21 13:14:58,693 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2021-12-21 13:14:58,697 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:58,702 INFO L225 Difference]: With dead ends: 866 [2021-12-21 13:14:58,702 INFO L226 Difference]: Without dead ends: 580 [2021-12-21 13:14:58,703 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-21 13:14:58,704 INFO L933 BasicCegarLoop]: 94 mSDtfsCounter, 179 mSDsluCounter, 346 mSDsCounter, 0 mSdLazyCounter, 218 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 440 SdHoareTripleChecker+Invalid, 281 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 218 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:58,704 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [187 Valid, 440 Invalid, 281 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 218 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:14:58,706 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 580 states. [2021-12-21 13:14:58,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 580 to 560. [2021-12-21 13:14:58,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 560 states, 415 states have (on average 1.219277108433735) internal successors, (506), 438 states have internal predecessors, (506), 72 states have call successors, (72), 66 states have call predecessors, (72), 72 states have return successors, (129), 74 states have call predecessors, (129), 72 states have call successors, (129) [2021-12-21 13:14:58,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 560 states to 560 states and 707 transitions. [2021-12-21 13:14:58,754 INFO L78 Accepts]: Start accepts. Automaton has 560 states and 707 transitions. Word has length 52 [2021-12-21 13:14:58,755 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:58,755 INFO L470 AbstractCegarLoop]: Abstraction has 560 states and 707 transitions. [2021-12-21 13:14:58,755 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:14:58,755 INFO L276 IsEmpty]: Start isEmpty. Operand 560 states and 707 transitions. [2021-12-21 13:14:58,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-21 13:14:58,757 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:58,757 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:58,757 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-21 13:14:58,758 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:58,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:58,758 INFO L85 PathProgramCache]: Analyzing trace with hash 1067067282, now seen corresponding path program 1 times [2021-12-21 13:14:58,758 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:58,759 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [938637366] [2021-12-21 13:14:58,759 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:58,759 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:58,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:14:58,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:14:58,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:14:58,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:58,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-21 13:14:58,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,874 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:58,874 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:58,874 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [938637366] [2021-12-21 13:14:58,874 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [938637366] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:58,875 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:58,875 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:14:58,875 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1050982598] [2021-12-21 13:14:58,875 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:58,875 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:14:58,875 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:58,876 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:14:58,876 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:58,876 INFO L87 Difference]: Start difference. First operand 560 states and 707 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:14:59,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:59,231 INFO L93 Difference]: Finished difference Result 1128 states and 1437 transitions. [2021-12-21 13:14:59,231 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-21 13:14:59,231 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2021-12-21 13:14:59,232 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:59,236 INFO L225 Difference]: With dead ends: 1128 [2021-12-21 13:14:59,236 INFO L226 Difference]: Without dead ends: 576 [2021-12-21 13:14:59,238 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2021-12-21 13:14:59,240 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 205 mSDsluCounter, 145 mSDsCounter, 0 mSdLazyCounter, 357 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 240 SdHoareTripleChecker+Invalid, 439 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 357 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:59,240 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [207 Valid, 240 Invalid, 439 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 357 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:14:59,242 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 576 states. [2021-12-21 13:14:59,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 576 to 556. [2021-12-21 13:14:59,289 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 556 states, 411 states have (on average 1.2019464720194648) internal successors, (494), 434 states have internal predecessors, (494), 72 states have call successors, (72), 66 states have call predecessors, (72), 72 states have return successors, (129), 74 states have call predecessors, (129), 72 states have call successors, (129) [2021-12-21 13:14:59,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 556 states to 556 states and 695 transitions. [2021-12-21 13:14:59,294 INFO L78 Accepts]: Start accepts. Automaton has 556 states and 695 transitions. Word has length 56 [2021-12-21 13:14:59,294 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:59,294 INFO L470 AbstractCegarLoop]: Abstraction has 556 states and 695 transitions. [2021-12-21 13:14:59,294 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:14:59,295 INFO L276 IsEmpty]: Start isEmpty. Operand 556 states and 695 transitions. [2021-12-21 13:14:59,296 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2021-12-21 13:14:59,296 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:59,296 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:59,297 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-21 13:14:59,297 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:59,297 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:59,297 INFO L85 PathProgramCache]: Analyzing trace with hash 2127597403, now seen corresponding path program 1 times [2021-12-21 13:14:59,298 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:59,298 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [24731345] [2021-12-21 13:14:59,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:59,298 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:59,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:14:59,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:14:59,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-21 13:14:59,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:14:59,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2021-12-21 13:14:59,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,371 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:59,371 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:59,371 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [24731345] [2021-12-21 13:14:59,371 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [24731345] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:59,371 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:59,371 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:14:59,371 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1195100451] [2021-12-21 13:14:59,372 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:59,372 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:14:59,372 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:59,372 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:14:59,372 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:14:59,373 INFO L87 Difference]: Start difference. First operand 556 states and 695 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:14:59,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:59,778 INFO L93 Difference]: Finished difference Result 1084 states and 1428 transitions. [2021-12-21 13:14:59,778 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-21 13:14:59,778 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2021-12-21 13:14:59,778 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:59,785 INFO L225 Difference]: With dead ends: 1084 [2021-12-21 13:14:59,785 INFO L226 Difference]: Without dead ends: 1082 [2021-12-21 13:14:59,786 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2021-12-21 13:14:59,787 INFO L933 BasicCegarLoop]: 101 mSDtfsCounter, 455 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 281 mSolverCounterSat, 243 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 456 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 524 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 243 IncrementalHoareTripleChecker+Valid, 281 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:59,788 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [456 Valid, 210 Invalid, 524 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [243 Valid, 281 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-21 13:14:59,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1082 states. [2021-12-21 13:14:59,837 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1082 to 842. [2021-12-21 13:14:59,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 842 states, 620 states have (on average 1.206451612903226) internal successors, (748), 664 states have internal predecessors, (748), 114 states have call successors, (114), 84 states have call predecessors, (114), 107 states have return successors, (244), 116 states have call predecessors, (244), 114 states have call successors, (244) [2021-12-21 13:14:59,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 842 states to 842 states and 1106 transitions. [2021-12-21 13:14:59,845 INFO L78 Accepts]: Start accepts. Automaton has 842 states and 1106 transitions. Word has length 58 [2021-12-21 13:14:59,845 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:59,845 INFO L470 AbstractCegarLoop]: Abstraction has 842 states and 1106 transitions. [2021-12-21 13:14:59,845 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:14:59,845 INFO L276 IsEmpty]: Start isEmpty. Operand 842 states and 1106 transitions. [2021-12-21 13:14:59,849 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2021-12-21 13:14:59,849 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:59,849 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:59,849 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-21 13:14:59,850 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:59,850 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:59,850 INFO L85 PathProgramCache]: Analyzing trace with hash -582322242, now seen corresponding path program 1 times [2021-12-21 13:14:59,850 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:59,851 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1221457920] [2021-12-21 13:14:59,851 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:59,851 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:59,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:14:59,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:14:59,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:14:59,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:14:59,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:14:59,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 13:14:59,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-12-21 13:14:59,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:14:59,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2021-12-21 13:14:59,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,976 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 21 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2021-12-21 13:14:59,976 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:59,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1221457920] [2021-12-21 13:14:59,976 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1221457920] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:14:59,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [669786412] [2021-12-21 13:14:59,977 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:59,977 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:14:59,977 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:14:59,979 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:00,007 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:15:00,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,090 INFO L263 TraceCheckSpWp]: Trace formula consists of 492 conjuncts, 4 conjunts are in the unsatisfiable core [2021-12-21 13:15:00,100 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:00,367 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:00,367 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:15:00,368 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [669786412] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:00,368 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:15:00,368 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 10 [2021-12-21 13:15:00,368 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [766937071] [2021-12-21 13:15:00,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:00,369 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:15:00,369 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:00,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:15:00,370 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:15:00,370 INFO L87 Difference]: Start difference. First operand 842 states and 1106 transitions. Second operand has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-21 13:15:00,432 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:00,433 INFO L93 Difference]: Finished difference Result 1458 states and 1956 transitions. [2021-12-21 13:15:00,433 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:15:00,433 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 102 [2021-12-21 13:15:00,433 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:00,437 INFO L225 Difference]: With dead ends: 1458 [2021-12-21 13:15:00,437 INFO L226 Difference]: Without dead ends: 730 [2021-12-21 13:15:00,440 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:15:00,441 INFO L933 BasicCegarLoop]: 152 mSDtfsCounter, 51 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:00,441 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [51 Valid, 222 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:00,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 730 states. [2021-12-21 13:15:00,474 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 730 to 730. [2021-12-21 13:15:00,475 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 730 states, 537 states have (on average 1.1824953445065176) internal successors, (635), 576 states have internal predecessors, (635), 99 states have call successors, (99), 77 states have call predecessors, (99), 93 states have return successors, (155), 99 states have call predecessors, (155), 99 states have call successors, (155) [2021-12-21 13:15:00,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 730 states to 730 states and 889 transitions. [2021-12-21 13:15:00,479 INFO L78 Accepts]: Start accepts. Automaton has 730 states and 889 transitions. Word has length 102 [2021-12-21 13:15:00,479 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:00,479 INFO L470 AbstractCegarLoop]: Abstraction has 730 states and 889 transitions. [2021-12-21 13:15:00,479 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-21 13:15:00,480 INFO L276 IsEmpty]: Start isEmpty. Operand 730 states and 889 transitions. [2021-12-21 13:15:00,482 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2021-12-21 13:15:00,483 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:00,483 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:00,511 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 13:15:00,699 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-21 13:15:00,700 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:00,700 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:00,700 INFO L85 PathProgramCache]: Analyzing trace with hash 1563413676, now seen corresponding path program 1 times [2021-12-21 13:15:00,700 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:00,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1617367684] [2021-12-21 13:15:00,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:00,700 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:00,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:15:00,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:15:00,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:15:00,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:15:00,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:00,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 13:15:00,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2021-12-21 13:15:00,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-21 13:15:00,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-21 13:15:00,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:00,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-12-21 13:15:00,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,841 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2021-12-21 13:15:00,842 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:00,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1617367684] [2021-12-21 13:15:00,842 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1617367684] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:15:00,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [337197880] [2021-12-21 13:15:00,842 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:00,842 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:00,842 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:00,843 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:00,845 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-21 13:15:00,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,945 INFO L263 TraceCheckSpWp]: Trace formula consists of 515 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-21 13:15:00,956 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:01,208 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2021-12-21 13:15:01,208 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:15:01,209 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [337197880] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:01,209 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:15:01,209 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2021-12-21 13:15:01,209 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [455346843] [2021-12-21 13:15:01,209 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:01,210 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:15:01,210 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:01,210 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:15:01,211 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2021-12-21 13:15:01,211 INFO L87 Difference]: Start difference. First operand 730 states and 889 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2021-12-21 13:15:01,325 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:01,325 INFO L93 Difference]: Finished difference Result 1315 states and 1596 transitions. [2021-12-21 13:15:01,326 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:15:01,326 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 112 [2021-12-21 13:15:01,327 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:01,327 INFO L225 Difference]: With dead ends: 1315 [2021-12-21 13:15:01,327 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:15:01,331 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 124 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2021-12-21 13:15:01,332 INFO L933 BasicCegarLoop]: 185 mSDtfsCounter, 46 mSDsluCounter, 784 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 969 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:01,332 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [47 Valid, 969 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:01,332 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:15:01,333 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:15:01,333 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:15:01,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:15:01,333 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 112 [2021-12-21 13:15:01,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:01,334 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:15:01,334 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2021-12-21 13:15:01,334 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:15:01,334 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:15:01,336 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:15:01,364 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-21 13:15:01,551 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2021-12-21 13:15:01,553 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:15:05,944 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 758 765) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2021-12-21 13:15:05,944 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 758 765) no Hoare annotation was computed. [2021-12-21 13:15:05,944 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 758 765) no Hoare annotation was computed. [2021-12-21 13:15:05,944 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 665 671) no Hoare annotation was computed. [2021-12-21 13:15:05,944 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 665 671) the Hoare annotation is: true [2021-12-21 13:15:05,944 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 896 907) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse6 (not (<= 1 ~pumpRunning~0))) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse3 .cse4) (or .cse1 (not (<= 2 ~waterLevel~0)) .cse6 .cse2 .cse3) (or .cse5 .cse1 .cse6 .cse3 .cse4))) [2021-12-21 13:15:05,945 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 896 907) no Hoare annotation was computed. [2021-12-21 13:15:05,945 INFO L858 garLoopResultBuilder]: For program point L900-1(lines 896 907) no Hoare annotation was computed. [2021-12-21 13:15:05,945 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 908 916) the Hoare annotation is: true [2021-12-21 13:15:05,945 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 908 916) no Hoare annotation was computed. [2021-12-21 13:15:05,945 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 908 916) no Hoare annotation was computed. [2021-12-21 13:15:05,945 INFO L858 garLoopResultBuilder]: For program point L733(lines 733 741) no Hoare annotation was computed. [2021-12-21 13:15:05,945 INFO L858 garLoopResultBuilder]: For program point L729(lines 729 746) no Hoare annotation was computed. [2021-12-21 13:15:05,945 INFO L858 garLoopResultBuilder]: For program point L180(lines 180 190) no Hoare annotation was computed. [2021-12-21 13:15:05,946 INFO L858 garLoopResultBuilder]: For program point L176(lines 176 193) no Hoare annotation was computed. [2021-12-21 13:15:05,946 INFO L854 garLoopResultBuilder]: At program point L176-1(lines 168 196) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse13 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse0 (and .cse7 .cse5 .cse13 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|) (not .cse3))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not .cse13)) (.cse11 (<= 1 ~pumpRunning~0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) .cse3 (and .cse7 .cse5 .cse6)) (or .cse8 .cse9 (and .cse7 .cse5 .cse10) (and .cse11 .cse12 .cse10) .cse2 .cse3) (or .cse9 .cse0 .cse1 .cse2 .cse3) (or (and .cse11 .cse5 .cse12 .cse10 .cse6) .cse8 .cse9 (and .cse7 .cse5 .cse10 .cse6) .cse4 .cse3)))) [2021-12-21 13:15:05,946 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 641 664) no Hoare annotation was computed. [2021-12-21 13:15:05,947 INFO L854 garLoopResultBuilder]: At program point L771(line 771) the Hoare annotation is: (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse2 .cse1 .cse5 .cse4) (or .cse6 .cse0 .cse3 .cse4) (or .cse6 .cse0 .cse5 .cse4) (or .cse2 .cse1 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-21 13:15:05,947 INFO L858 garLoopResultBuilder]: For program point L771-1(line 771) no Hoare annotation was computed. [2021-12-21 13:15:05,947 INFO L858 garLoopResultBuilder]: For program point L181(lines 181 187) no Hoare annotation was computed. [2021-12-21 13:15:05,947 INFO L858 garLoopResultBuilder]: For program point L652-1(lines 652 658) no Hoare annotation was computed. [2021-12-21 13:15:05,947 INFO L854 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 .cse2) (or .cse3 .cse0 .cse4 .cse2) (or .cse0 .cse4 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse3 .cse4 .cse2) (or .cse5 .cse3 .cse1 .cse2))) [2021-12-21 13:15:05,947 INFO L854 garLoopResultBuilder]: At program point L735(line 735) the Hoare annotation is: (let ((.cse1 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse2 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= 0 ~systemActive~0))) (and (or (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or (and .cse0 .cse1 .cse2) .cse4 .cse5 .cse6 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse4 .cse7 .cse6) (or .cse8 .cse3 .cse5 .cse6) (or .cse8 .cse3 .cse7 .cse6))) [2021-12-21 13:15:05,947 INFO L858 garLoopResultBuilder]: For program point L1012(line 1012) no Hoare annotation was computed. [2021-12-21 13:15:05,947 INFO L854 garLoopResultBuilder]: At program point L174(line 174) the Hoare annotation is: (let ((.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse4 (and .cse9 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (and .cse9 .cse13)) (.cse11 (<= 1 ~pumpRunning~0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse6 .cse7 .cse8 .cse3) (or .cse5 .cse0 .cse6 .cse7 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse1 .cse8 .cse3) (or .cse5 .cse0 .cse10 (and .cse11 .cse6 .cse12 .cse13) .cse2 .cse3) (or .cse5 .cse0 .cse10 (and .cse11 .cse12 .cse13) .cse8 .cse3)))) [2021-12-21 13:15:05,948 INFO L858 garLoopResultBuilder]: For program point L174-1(line 174) no Hoare annotation was computed. [2021-12-21 13:15:05,948 INFO L858 garLoopResultBuilder]: For program point L876(lines 876 880) no Hoare annotation was computed. [2021-12-21 13:15:05,948 INFO L854 garLoopResultBuilder]: At program point L876-2(lines 872 883) the Hoare annotation is: (let ((.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse2 .cse1 .cse5 .cse4) (or .cse6 .cse0 .cse3 .cse4) (or .cse6 .cse0 .cse5 .cse4) (or .cse2 .cse1 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))))) [2021-12-21 13:15:05,948 INFO L854 garLoopResultBuilder]: At program point L744(line 744) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4) (or .cse0 .cse1 (and .cse5 .cse6) .cse3 .cse4) (or .cse0 .cse1 (and .cse5 .cse2 .cse6) .cse7 .cse4) (or .cse1 .cse8 .cse7 .cse4) (or .cse8 .cse7 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse8 .cse3 .cse4))) [2021-12-21 13:15:05,949 INFO L854 garLoopResultBuilder]: At program point L744-1(lines 725 749) the Hoare annotation is: (let ((.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse4 (and .cse9 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (and .cse9 .cse13)) (.cse11 (<= 1 ~pumpRunning~0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse6 .cse7 .cse8 .cse3) (or .cse5 .cse0 .cse6 .cse7 .cse2 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse1 .cse8 .cse3) (or .cse5 .cse0 .cse10 (and .cse11 .cse6 .cse12 .cse13) .cse2 .cse3) (or .cse5 .cse0 .cse10 (and .cse11 .cse12 .cse13) .cse8 .cse3)))) [2021-12-21 13:15:05,949 INFO L854 garLoopResultBuilder]: At program point L773(lines 766 776) the Hoare annotation is: (let ((.cse3 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0) .cse3) .cse4) (or .cse2 .cse0 .cse6 .cse4) (or .cse7 .cse5 .cse1 .cse4) (or .cse7 .cse5 .cse6 .cse4))) [2021-12-21 13:15:05,949 INFO L858 garLoopResultBuilder]: For program point L645-1(lines 644 663) no Hoare annotation was computed. [2021-12-21 13:15:05,949 INFO L854 garLoopResultBuilder]: At program point L1013(lines 1008 1015) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse3) (or .cse5 .cse0 .cse2 .cse3) (or .cse5 .cse0 .cse4 .cse3))) [2021-12-21 13:15:05,949 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 641 664) the Hoare annotation is: (let ((.cse6 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (and .cse5 .cse7)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (and .cse5 .cse6 .cse7) .cse8 .cse0 .cse4 .cse3) (or .cse9 .cse8 .cse10 .cse4 .cse3) (or .cse9 .cse8 .cse10 .cse1 .cse3)))) [2021-12-21 13:15:05,949 INFO L854 garLoopResultBuilder]: At program point L782(lines 777 785) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse11 (<= 1 ~methaneLevelCritical~0)) (.cse10 (= |timeShift_isPumpRunning_#res#1| 0))) (let ((.cse5 (and .cse9 .cse11 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|) .cse10)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse3 (not .cse11)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse3 .cse4) (or .cse6 .cse7 .cse4) (or .cse5 .cse6 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 (and (<= 1 ~pumpRunning~0) .cse2 (<= 2 ~waterLevel~0) .cse8) .cse3 (and .cse9 .cse10 .cse8) .cse4)) (or .cse0 .cse1 .cse7 .cse4)))) [2021-12-21 13:15:05,949 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 641 664) no Hoare annotation was computed. [2021-12-21 13:15:05,949 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1012) no Hoare annotation was computed. [2021-12-21 13:15:05,949 INFO L861 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2021-12-21 13:15:05,949 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2021-12-21 13:15:05,950 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2021-12-21 13:15:05,950 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2021-12-21 13:15:05,950 INFO L861 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2021-12-21 13:15:05,950 INFO L861 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2021-12-21 13:15:05,950 INFO L858 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2021-12-21 13:15:05,950 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2021-12-21 13:15:05,950 INFO L858 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2021-12-21 13:15:05,950 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-12-21 13:15:05,950 INFO L854 garLoopResultBuilder]: At program point L865(lines 860 867) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5 .cse6) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6))) [2021-12-21 13:15:05,950 INFO L858 garLoopResultBuilder]: For program point L576(lines 575 622) no Hoare annotation was computed. [2021-12-21 13:15:05,951 INFO L861 garLoopResultBuilder]: At program point L126(lines 118 128) the Hoare annotation is: true [2021-12-21 13:15:05,951 INFO L858 garLoopResultBuilder]: For program point L605(lines 605 618) no Hoare annotation was computed. [2021-12-21 13:15:05,951 INFO L861 garLoopResultBuilder]: At program point L151(lines 132 154) the Hoare annotation is: true [2021-12-21 13:15:05,951 INFO L854 garLoopResultBuilder]: At program point L597(line 597) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5 .cse6) (and .cse7 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6))) [2021-12-21 13:15:05,951 INFO L861 garLoopResultBuilder]: At program point L626(lines 565 630) the Hoare annotation is: true [2021-12-21 13:15:05,952 INFO L858 garLoopResultBuilder]: For program point L585(lines 585 591) no Hoare annotation was computed. [2021-12-21 13:15:05,952 INFO L858 garLoopResultBuilder]: For program point L585-1(lines 585 591) no Hoare annotation was computed. [2021-12-21 13:15:05,952 INFO L858 garLoopResultBuilder]: For program point L577(lines 577 581) no Hoare annotation was computed. [2021-12-21 13:15:05,952 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:15:05,952 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:15:05,952 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:15:05,952 INFO L854 garLoopResultBuilder]: At program point L623(lines 574 624) the Hoare annotation is: false [2021-12-21 13:15:05,952 INFO L854 garLoopResultBuilder]: At program point L1003(lines 998 1006) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:05,952 INFO L854 garLoopResultBuilder]: At program point L165(lines 160 167) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:05,953 INFO L854 garLoopResultBuilder]: At program point L995(lines 991 997) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:05,953 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:15:05,953 INFO L858 garLoopResultBuilder]: For program point L595(lines 595 601) no Hoare annotation was computed. [2021-12-21 13:15:05,953 INFO L858 garLoopResultBuilder]: For program point L595-1(lines 595 601) no Hoare annotation was computed. [2021-12-21 13:15:05,953 INFO L854 garLoopResultBuilder]: At program point L620(lines 575 622) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5 .cse6) (and .cse7 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6))) [2021-12-21 13:15:05,954 INFO L854 garLoopResultBuilder]: At program point L587(line 587) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse8 .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5 .cse6) (and .cse7 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6))) [2021-12-21 13:15:05,954 INFO L854 garLoopResultBuilder]: At program point L988(lines 984 990) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:05,954 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:05,955 INFO L858 garLoopResultBuilder]: For program point L142(lines 142 149) no Hoare annotation was computed. [2021-12-21 13:15:05,955 INFO L858 garLoopResultBuilder]: For program point L142-2(lines 142 149) no Hoare annotation was computed. [2021-12-21 13:15:05,955 INFO L858 garLoopResultBuilder]: For program point L613(lines 613 617) no Hoare annotation was computed. [2021-12-21 13:15:05,956 INFO L854 garLoopResultBuilder]: At program point L613-2(lines 605 618) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5 .cse6) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse6))) [2021-12-21 13:15:05,956 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 673 697) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3))) [2021-12-21 13:15:05,956 INFO L854 garLoopResultBuilder]: At program point L958(lines 949 962) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2021-12-21 13:15:05,956 INFO L854 garLoopResultBuilder]: At program point L692(line 692) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2021-12-21 13:15:05,957 INFO L858 garLoopResultBuilder]: For program point L692-1(lines 673 697) no Hoare annotation was computed. [2021-12-21 13:15:05,957 INFO L854 garLoopResultBuilder]: At program point L837(lines 822 840) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (not .cse4))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse4)))) [2021-12-21 13:15:05,957 INFO L858 garLoopResultBuilder]: For program point L831(lines 831 835) no Hoare annotation was computed. [2021-12-21 13:15:05,957 INFO L858 garLoopResultBuilder]: For program point L831-2(lines 831 835) no Hoare annotation was computed. [2021-12-21 13:15:05,957 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 673 697) no Hoare annotation was computed. [2021-12-21 13:15:05,957 INFO L858 garLoopResultBuilder]: For program point L953(lines 953 959) no Hoare annotation was computed. [2021-12-21 13:15:05,957 INFO L854 garLoopResultBuilder]: At program point L755(lines 750 757) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse3 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse2))) [2021-12-21 13:15:05,958 INFO L854 garLoopResultBuilder]: At program point L687(line 687) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0) (not .cse2)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse2) (or .cse0 .cse3 .cse1 .cse2)))) [2021-12-21 13:15:05,958 INFO L858 garLoopResultBuilder]: For program point L681(lines 681 689) no Hoare annotation was computed. [2021-12-21 13:15:05,958 INFO L858 garLoopResultBuilder]: For program point L677(lines 677 694) no Hoare annotation was computed. [2021-12-21 13:15:05,959 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 884 895) no Hoare annotation was computed. [2021-12-21 13:15:05,959 INFO L858 garLoopResultBuilder]: For program point L888-1(lines 884 895) no Hoare annotation was computed. [2021-12-21 13:15:05,959 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 884 895) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse6 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse2 .cse3 .cse4))) [2021-12-21 13:15:05,960 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 699 723) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3))) [2021-12-21 13:15:05,960 INFO L854 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2021-12-21 13:15:05,960 INFO L854 garLoopResultBuilder]: At program point L709(line 709) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2021-12-21 13:15:05,960 INFO L858 garLoopResultBuilder]: For program point L707(lines 707 715) no Hoare annotation was computed. [2021-12-21 13:15:05,960 INFO L858 garLoopResultBuilder]: For program point L703(lines 703 720) no Hoare annotation was computed. [2021-12-21 13:15:05,960 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 699 723) no Hoare annotation was computed. [2021-12-21 13:15:05,961 INFO L854 garLoopResultBuilder]: At program point L856(lines 841 859) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2021-12-21 13:15:05,961 INFO L858 garLoopResultBuilder]: For program point L850(lines 850 854) no Hoare annotation was computed. [2021-12-21 13:15:05,961 INFO L858 garLoopResultBuilder]: For program point L850-2(lines 850 854) no Hoare annotation was computed. [2021-12-21 13:15:05,961 INFO L854 garLoopResultBuilder]: At program point L718(line 718) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3))) [2021-12-21 13:15:05,961 INFO L858 garLoopResultBuilder]: For program point L718-1(lines 699 723) no Hoare annotation was computed. [2021-12-21 13:15:05,961 INFO L854 garLoopResultBuilder]: At program point L968(lines 963 971) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2021-12-21 13:15:05,964 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:05,965 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:15:06,016 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:15:06 BoogieIcfgContainer [2021-12-21 13:15:06,016 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:15:06,017 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:15:06,017 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:15:06,018 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:15:06,018 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:14:56" (3/4) ... [2021-12-21 13:15:06,021 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:15:06,027 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-21 13:15:06,028 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:15:06,028 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:15:06,028 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-21 13:15:06,028 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:15:06,028 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:15:06,028 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:15:06,029 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:15:06,029 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2021-12-21 13:15:06,040 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2021-12-21 13:15:06,041 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:15:06,041 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:15:06,042 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:15:06,042 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:15:06,042 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:15:06,043 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:15:06,061 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-21 13:15:06,062 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-21 13:15:06,062 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-21 13:15:06,062 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2021-12-21 13:15:06,063 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2021-12-21 13:15:06,064 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 1 <= \result) && 1 <= tmp)) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 1 <= \result) && 1 <= tmp)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:06,065 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2021-12-21 13:15:06,066 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || 0 == systemActive) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:06,066 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || 0 == systemActive)) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:06,066 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && \result == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && \result == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:06,066 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:06,067 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2021-12-21 13:15:06,067 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:06,067 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:06,068 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:06,070 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:06,114 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:15:06,114 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:15:06,115 INFO L158 Benchmark]: Toolchain (without parser) took 11081.53ms. Allocated memory was 111.1MB in the beginning and 161.5MB in the end (delta: 50.3MB). Free memory was 80.1MB in the beginning and 112.5MB in the end (delta: -32.4MB). Peak memory consumption was 17.8MB. Max. memory is 16.1GB. [2021-12-21 13:15:06,115 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 77.6MB. Free memory was 49.1MB in the beginning and 49.1MB in the end (delta: 25.9kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:15:06,115 INFO L158 Benchmark]: CACSL2BoogieTranslator took 510.39ms. Allocated memory is still 111.1MB. Free memory was 80.1MB in the beginning and 80.0MB in the end (delta: 91.3kB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-21 13:15:06,116 INFO L158 Benchmark]: Boogie Procedure Inliner took 69.53ms. Allocated memory is still 111.1MB. Free memory was 80.0MB in the beginning and 77.2MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:06,116 INFO L158 Benchmark]: Boogie Preprocessor took 50.53ms. Allocated memory is still 111.1MB. Free memory was 77.2MB in the beginning and 75.8MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:06,117 INFO L158 Benchmark]: RCFGBuilder took 477.94ms. Allocated memory is still 111.1MB. Free memory was 75.8MB in the beginning and 58.3MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-21 13:15:06,117 INFO L158 Benchmark]: TraceAbstraction took 9870.46ms. Allocated memory was 111.1MB in the beginning and 161.5MB in the end (delta: 50.3MB). Free memory was 57.6MB in the beginning and 119.9MB in the end (delta: -62.3MB). Peak memory consumption was 70.3MB. Max. memory is 16.1GB. [2021-12-21 13:15:06,118 INFO L158 Benchmark]: Witness Printer took 96.91ms. Allocated memory is still 161.5MB. Free memory was 119.9MB in the beginning and 112.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-21 13:15:06,120 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 77.6MB. Free memory was 49.1MB in the beginning and 49.1MB in the end (delta: 25.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 510.39ms. Allocated memory is still 111.1MB. Free memory was 80.1MB in the beginning and 80.0MB in the end (delta: 91.3kB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 69.53ms. Allocated memory is still 111.1MB. Free memory was 80.0MB in the beginning and 77.2MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 50.53ms. Allocated memory is still 111.1MB. Free memory was 77.2MB in the beginning and 75.8MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 477.94ms. Allocated memory is still 111.1MB. Free memory was 75.8MB in the beginning and 58.3MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 9870.46ms. Allocated memory was 111.1MB in the beginning and 161.5MB in the end (delta: 50.3MB). Free memory was 57.6MB in the beginning and 119.9MB in the end (delta: -62.3MB). Peak memory consumption was 70.3MB. Max. memory is 16.1GB. * Witness Printer took 96.91ms. Allocated memory is still 161.5MB. Free memory was 119.9MB in the beginning and 112.5MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1012]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 103 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.8s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.4s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1635 SdHoareTripleChecker+Valid, 1.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1600 mSDsluCounter, 4084 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2614 mSDsCounter, 555 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1408 IncrementalHoareTripleChecker+Invalid, 1963 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 555 mSolverCounterUnsat, 1470 mSDtfsCounter, 1408 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 431 GetRequests, 335 SyntacticMatches, 3 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 134 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=842occurred in iteration=10, InterpolantAutomatonStates: 85, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 307 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 48 LocationsWithAnnotation, 1750 PreInvPairs, 1949 NumberOfFragments, 2938 HoareAnnotationTreeSize, 1750 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 48 FomulaSimplificationsInter, 12573 FormulaSimplificationTreeSizeReductionInter, 4.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 870 NumberOfCodeBlocks, 870 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 856 ConstructedInterpolants, 0 QuantifiedInterpolants, 1567 SizeOfPredicates, 5 NumberOfNonLiveVariables, 1007 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 14 InterpolantComputations, 12 PerfectInterpolantSequences, 152/161 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 998]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 574]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || 0 == systemActive)) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 984]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: ((((((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || 0 == systemActive) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 949]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 1008]: Loop Invariant Derived loop invariant: ((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: (((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 1 <= \result) && 1 <= tmp)) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 1 <= \result) && 1 <= tmp)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 750]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 777]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && \result == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && \result == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2021-12-21 13:15:06,186 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE