./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a5df7e7a530538a677becf014bfb990c6b0570c5e1058d85d7e78cec25f53253 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:14:56,060 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:14:56,062 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:14:56,120 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:14:56,122 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:14:56,125 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:14:56,127 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:14:56,129 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:14:56,131 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:14:56,136 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:14:56,137 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:14:56,138 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:14:56,138 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:14:56,140 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:14:56,141 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:14:56,143 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:14:56,143 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:14:56,144 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:14:56,148 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:14:56,151 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:14:56,152 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:14:56,153 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:14:56,154 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:14:56,155 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:14:56,158 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:14:56,158 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:14:56,158 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:14:56,159 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:14:56,160 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:14:56,160 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:14:56,161 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:14:56,161 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:14:56,162 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:14:56,163 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:14:56,164 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:14:56,164 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:14:56,165 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:14:56,165 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:14:56,165 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:14:56,166 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:14:56,167 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:14:56,167 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:14:56,197 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:14:56,197 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:14:56,198 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:14:56,198 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:14:56,198 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:14:56,199 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:14:56,199 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:14:56,199 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:14:56,199 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:14:56,200 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:14:56,200 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:14:56,200 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:14:56,201 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:14:56,201 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:14:56,201 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:14:56,201 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:14:56,201 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:14:56,201 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:14:56,202 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:14:56,202 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:14:56,202 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:14:56,202 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:14:56,202 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:14:56,202 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:14:56,203 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:14:56,203 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:14:56,203 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:14:56,204 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:14:56,204 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:14:56,204 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:14:56,204 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:14:56,205 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:14:56,205 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:14:56,205 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:14:56,205 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a5df7e7a530538a677becf014bfb990c6b0570c5e1058d85d7e78cec25f53253 [2021-12-21 13:14:56,407 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:14:56,431 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:14:56,434 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:14:56,435 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:14:56,435 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:14:56,436 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c [2021-12-21 13:14:56,494 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/64fb8c9ae/8ce7951f2fd54a6da61e06cbb322c49a/FLAGa3c1c3443 [2021-12-21 13:14:56,887 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:14:56,888 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c [2021-12-21 13:14:56,914 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/64fb8c9ae/8ce7951f2fd54a6da61e06cbb322c49a/FLAGa3c1c3443 [2021-12-21 13:14:57,254 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/64fb8c9ae/8ce7951f2fd54a6da61e06cbb322c49a [2021-12-21 13:14:57,257 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:14:57,258 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:14:57,259 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:14:57,259 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:14:57,261 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:14:57,262 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,263 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7a35c01e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57, skipping insertion in model container [2021-12-21 13:14:57,263 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,268 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:14:57,299 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:14:57,532 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c[19170,19183] [2021-12-21 13:14:57,536 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:14:57,543 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:14:57,581 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c[19170,19183] [2021-12-21 13:14:57,582 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:14:57,592 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:14:57,592 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57 WrapperNode [2021-12-21 13:14:57,592 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:14:57,593 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:14:57,593 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:14:57,593 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:14:57,609 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,635 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,658 INFO L137 Inliner]: procedures = 58, calls = 158, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 279 [2021-12-21 13:14:57,658 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:14:57,659 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:14:57,659 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:14:57,659 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:14:57,667 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,667 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,669 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,672 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,676 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,704 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,705 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,706 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:14:57,707 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:14:57,707 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:14:57,707 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:14:57,708 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,712 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:14:57,721 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:14:57,768 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:14:57,804 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:14:57,828 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:14:57,828 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:14:57,828 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:14:57,828 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:14:57,828 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:14:57,828 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:14:57,829 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:14:57,829 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-21 13:14:57,829 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-21 13:14:57,829 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:14:57,829 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:14:57,829 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:14:57,830 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:14:57,830 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:14:57,830 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:14:57,830 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:14:57,830 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:14:57,830 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:14:57,896 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:14:57,897 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:14:58,107 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:14:58,112 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:14:58,113 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:14:58,114 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:14:58 BoogieIcfgContainer [2021-12-21 13:14:58,114 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:14:58,115 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:14:58,116 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:14:58,118 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:14:58,118 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:14:57" (1/3) ... [2021-12-21 13:14:58,119 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@46048b44 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:14:58, skipping insertion in model container [2021-12-21 13:14:58,119 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57" (2/3) ... [2021-12-21 13:14:58,119 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@46048b44 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:14:58, skipping insertion in model container [2021-12-21 13:14:58,119 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:14:58" (3/3) ... [2021-12-21 13:14:58,120 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product58.cil.c [2021-12-21 13:14:58,123 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:14:58,124 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:14:58,153 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:14:58,157 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:14:58,157 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:14:58,170 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2021-12-21 13:14:58,175 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-21 13:14:58,175 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:58,176 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:58,176 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:58,180 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:58,180 INFO L85 PathProgramCache]: Analyzing trace with hash 1936540556, now seen corresponding path program 1 times [2021-12-21 13:14:58,185 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:58,186 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1532837466] [2021-12-21 13:14:58,186 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:58,187 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:58,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-21 13:14:58,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,329 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:58,330 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:58,330 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1532837466] [2021-12-21 13:14:58,331 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1532837466] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:58,332 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:58,332 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:14:58,333 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [668936743] [2021-12-21 13:14:58,333 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:58,336 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:14:58,337 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:58,359 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:14:58,360 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:14:58,363 INFO L87 Difference]: Start difference. First operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:58,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:58,406 INFO L93 Difference]: Finished difference Result 179 states and 244 transitions. [2021-12-21 13:14:58,407 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:14:58,408 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-21 13:14:58,408 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:58,419 INFO L225 Difference]: With dead ends: 179 [2021-12-21 13:14:58,420 INFO L226 Difference]: Without dead ends: 85 [2021-12-21 13:14:58,423 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:14:58,426 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:58,426 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:58,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-12-21 13:14:58,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-12-21 13:14:58,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 73 states have internal predecessors, (87), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-21 13:14:58,467 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2021-12-21 13:14:58,468 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2021-12-21 13:14:58,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:58,468 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2021-12-21 13:14:58,469 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:58,469 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2021-12-21 13:14:58,471 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-21 13:14:58,472 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:58,472 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:58,472 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:14:58,473 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:58,475 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:58,475 INFO L85 PathProgramCache]: Analyzing trace with hash -433728910, now seen corresponding path program 1 times [2021-12-21 13:14:58,475 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:58,476 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [330116411] [2021-12-21 13:14:58,476 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:58,476 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:58,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 13:14:58,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,585 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:58,585 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:58,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [330116411] [2021-12-21 13:14:58,586 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [330116411] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:58,586 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:58,586 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:14:58,587 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1495356646] [2021-12-21 13:14:58,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:58,588 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:14:58,589 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:58,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:14:58,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:58,590 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:58,600 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:58,603 INFO L93 Difference]: Finished difference Result 134 states and 174 transitions. [2021-12-21 13:14:58,604 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:14:58,604 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-21 13:14:58,606 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:58,608 INFO L225 Difference]: With dead ends: 134 [2021-12-21 13:14:58,608 INFO L226 Difference]: Without dead ends: 76 [2021-12-21 13:14:58,613 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:58,614 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 13 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:58,615 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 177 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:58,617 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2021-12-21 13:14:58,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2021-12-21 13:14:58,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 67 states have internal predecessors, (80), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-21 13:14:58,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2021-12-21 13:14:58,630 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 26 [2021-12-21 13:14:58,630 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:58,631 INFO L470 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2021-12-21 13:14:58,631 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:58,631 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2021-12-21 13:14:58,632 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-12-21 13:14:58,633 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:58,633 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:58,633 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:14:58,634 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:58,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:58,634 INFO L85 PathProgramCache]: Analyzing trace with hash -960870689, now seen corresponding path program 1 times [2021-12-21 13:14:58,635 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:58,635 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [186858079] [2021-12-21 13:14:58,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:58,635 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:58,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:14:58,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,731 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:58,731 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:58,731 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [186858079] [2021-12-21 13:14:58,731 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [186858079] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:58,732 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:58,732 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:14:58,732 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1359649136] [2021-12-21 13:14:58,732 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:58,732 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:14:58,733 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:58,733 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:14:58,733 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:14:58,733 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:58,773 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:58,773 INFO L93 Difference]: Finished difference Result 144 states and 189 transitions. [2021-12-21 13:14:58,774 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:14:58,774 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-12-21 13:14:58,774 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:58,775 INFO L225 Difference]: With dead ends: 144 [2021-12-21 13:14:58,775 INFO L226 Difference]: Without dead ends: 76 [2021-12-21 13:14:58,775 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:58,776 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 125 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:58,776 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [125 Valid, 239 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:58,777 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2021-12-21 13:14:58,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2021-12-21 13:14:58,784 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 67 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2021-12-21 13:14:58,784 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 97 transitions. [2021-12-21 13:14:58,785 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 97 transitions. Word has length 31 [2021-12-21 13:14:58,785 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:58,785 INFO L470 AbstractCegarLoop]: Abstraction has 76 states and 97 transitions. [2021-12-21 13:14:58,785 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:58,785 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2021-12-21 13:14:58,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2021-12-21 13:14:58,788 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:58,788 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:58,788 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:14:58,788 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:58,789 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:58,789 INFO L85 PathProgramCache]: Analyzing trace with hash 1051649323, now seen corresponding path program 1 times [2021-12-21 13:14:58,790 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:58,790 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1137568300] [2021-12-21 13:14:58,790 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:58,790 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:58,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-21 13:14:58,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,851 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:58,851 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:58,851 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1137568300] [2021-12-21 13:14:58,852 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1137568300] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:58,852 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:58,852 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:14:58,852 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1349152896] [2021-12-21 13:14:58,852 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:58,853 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:14:58,853 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:58,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:14:58,854 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:58,854 INFO L87 Difference]: Start difference. First operand 76 states and 97 transitions. Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:58,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:58,883 INFO L93 Difference]: Finished difference Result 189 states and 247 transitions. [2021-12-21 13:14:58,884 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:14:58,884 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2021-12-21 13:14:58,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:58,885 INFO L225 Difference]: With dead ends: 189 [2021-12-21 13:14:58,885 INFO L226 Difference]: Without dead ends: 121 [2021-12-21 13:14:58,886 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:58,886 INFO L933 BasicCegarLoop]: 110 mSDtfsCounter, 60 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:58,887 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [60 Valid, 173 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:58,887 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2021-12-21 13:14:58,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 119. [2021-12-21 13:14:58,895 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 119 states, 93 states have (on average 1.3010752688172043) internal successors, (121), 101 states have internal predecessors, (121), 13 states have call successors, (13), 12 states have call predecessors, (13), 12 states have return successors, (17), 13 states have call predecessors, (17), 13 states have call successors, (17) [2021-12-21 13:14:58,895 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119 states to 119 states and 151 transitions. [2021-12-21 13:14:58,896 INFO L78 Accepts]: Start accepts. Automaton has 119 states and 151 transitions. Word has length 39 [2021-12-21 13:14:58,896 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:58,896 INFO L470 AbstractCegarLoop]: Abstraction has 119 states and 151 transitions. [2021-12-21 13:14:58,896 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:58,896 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 151 transitions. [2021-12-21 13:14:58,897 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-21 13:14:58,897 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:58,897 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:58,897 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:14:58,898 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:58,898 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:58,898 INFO L85 PathProgramCache]: Analyzing trace with hash 1776043399, now seen corresponding path program 1 times [2021-12-21 13:14:58,898 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:58,898 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [330324038] [2021-12-21 13:14:58,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:58,899 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:58,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:14:58,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:58,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2021-12-21 13:14:58,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,941 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:58,941 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:58,941 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [330324038] [2021-12-21 13:14:58,941 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [330324038] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:58,941 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:58,941 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:14:58,942 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1403459270] [2021-12-21 13:14:58,942 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:58,942 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:14:58,942 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:58,942 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:14:58,943 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:14:58,943 INFO L87 Difference]: Start difference. First operand 119 states and 151 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:14:59,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:59,035 INFO L93 Difference]: Finished difference Result 273 states and 359 transitions. [2021-12-21 13:14:59,035 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-21 13:14:59,036 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2021-12-21 13:14:59,036 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:59,037 INFO L225 Difference]: With dead ends: 273 [2021-12-21 13:14:59,037 INFO L226 Difference]: Without dead ends: 162 [2021-12-21 13:14:59,037 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-21 13:14:59,038 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 92 mSDsluCounter, 208 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 304 SdHoareTripleChecker+Invalid, 101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:59,038 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [96 Valid, 304 Invalid, 101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:14:59,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2021-12-21 13:14:59,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 145. [2021-12-21 13:14:59,054 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 145 states, 114 states have (on average 1.2982456140350878) internal successors, (148), 122 states have internal predecessors, (148), 15 states have call successors, (15), 12 states have call predecessors, (15), 15 states have return successors, (22), 16 states have call predecessors, (22), 15 states have call successors, (22) [2021-12-21 13:14:59,056 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 145 states to 145 states and 185 transitions. [2021-12-21 13:14:59,057 INFO L78 Accepts]: Start accepts. Automaton has 145 states and 185 transitions. Word has length 47 [2021-12-21 13:14:59,057 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:59,057 INFO L470 AbstractCegarLoop]: Abstraction has 145 states and 185 transitions. [2021-12-21 13:14:59,057 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:14:59,057 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 185 transitions. [2021-12-21 13:14:59,058 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2021-12-21 13:14:59,058 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:59,058 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:59,059 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:14:59,059 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:59,059 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:59,059 INFO L85 PathProgramCache]: Analyzing trace with hash 1353341573, now seen corresponding path program 1 times [2021-12-21 13:14:59,059 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:59,060 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [782793504] [2021-12-21 13:14:59,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:59,060 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:59,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:14:59,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:59,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2021-12-21 13:14:59,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,112 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:59,112 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:59,113 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [782793504] [2021-12-21 13:14:59,113 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [782793504] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:59,113 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:59,113 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:14:59,113 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1077369406] [2021-12-21 13:14:59,113 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:59,114 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:14:59,114 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:59,114 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:14:59,114 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:59,115 INFO L87 Difference]: Start difference. First operand 145 states and 185 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:14:59,277 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:59,278 INFO L93 Difference]: Finished difference Result 419 states and 543 transitions. [2021-12-21 13:14:59,278 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-21 13:14:59,278 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2021-12-21 13:14:59,279 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:59,280 INFO L225 Difference]: With dead ends: 419 [2021-12-21 13:14:59,280 INFO L226 Difference]: Without dead ends: 282 [2021-12-21 13:14:59,281 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-21 13:14:59,282 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 155 mSDsluCounter, 363 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 162 SdHoareTripleChecker+Valid, 460 SdHoareTripleChecker+Invalid, 224 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:59,282 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [162 Valid, 460 Invalid, 224 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 179 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:14:59,283 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2021-12-21 13:14:59,296 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 268. [2021-12-21 13:14:59,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 268 states, 207 states have (on average 1.2608695652173914) internal successors, (261), 222 states have internal predecessors, (261), 30 states have call successors, (30), 24 states have call predecessors, (30), 30 states have return successors, (46), 32 states have call predecessors, (46), 30 states have call successors, (46) [2021-12-21 13:14:59,297 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 268 states to 268 states and 337 transitions. [2021-12-21 13:14:59,298 INFO L78 Accepts]: Start accepts. Automaton has 268 states and 337 transitions. Word has length 47 [2021-12-21 13:14:59,298 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:59,298 INFO L470 AbstractCegarLoop]: Abstraction has 268 states and 337 transitions. [2021-12-21 13:14:59,298 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:14:59,298 INFO L276 IsEmpty]: Start isEmpty. Operand 268 states and 337 transitions. [2021-12-21 13:14:59,299 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2021-12-21 13:14:59,299 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:59,300 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:59,300 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:14:59,300 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:59,300 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:59,300 INFO L85 PathProgramCache]: Analyzing trace with hash -767183671, now seen corresponding path program 1 times [2021-12-21 13:14:59,300 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:59,301 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1954171830] [2021-12-21 13:14:59,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:59,301 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:59,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:14:59,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:14:59,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:59,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-21 13:14:59,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,354 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:59,355 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:59,355 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1954171830] [2021-12-21 13:14:59,355 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1954171830] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:59,355 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:59,355 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:14:59,355 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [708742068] [2021-12-21 13:14:59,355 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:59,356 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:14:59,356 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:59,356 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:14:59,356 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:59,356 INFO L87 Difference]: Start difference. First operand 268 states and 337 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-21 13:14:59,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:59,640 INFO L93 Difference]: Finished difference Result 540 states and 680 transitions. [2021-12-21 13:14:59,640 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-21 13:14:59,640 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 51 [2021-12-21 13:14:59,641 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:59,642 INFO L225 Difference]: With dead ends: 540 [2021-12-21 13:14:59,642 INFO L226 Difference]: Without dead ends: 280 [2021-12-21 13:14:59,643 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2021-12-21 13:14:59,645 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 184 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 340 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 186 SdHoareTripleChecker+Valid, 252 SdHoareTripleChecker+Invalid, 399 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 340 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:59,645 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [186 Valid, 252 Invalid, 399 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 340 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:14:59,647 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 280 states. [2021-12-21 13:14:59,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 280 to 266. [2021-12-21 13:14:59,677 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 205 states have (on average 1.2439024390243902) internal successors, (255), 220 states have internal predecessors, (255), 30 states have call successors, (30), 24 states have call predecessors, (30), 30 states have return successors, (46), 32 states have call predecessors, (46), 30 states have call successors, (46) [2021-12-21 13:14:59,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 331 transitions. [2021-12-21 13:14:59,678 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 331 transitions. Word has length 51 [2021-12-21 13:14:59,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:59,679 INFO L470 AbstractCegarLoop]: Abstraction has 266 states and 331 transitions. [2021-12-21 13:14:59,679 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-21 13:14:59,679 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 331 transitions. [2021-12-21 13:14:59,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-21 13:14:59,680 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:59,680 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:59,680 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:14:59,680 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:59,681 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:59,681 INFO L85 PathProgramCache]: Analyzing trace with hash 1398170692, now seen corresponding path program 1 times [2021-12-21 13:14:59,681 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:59,681 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [958507604] [2021-12-21 13:14:59,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:59,681 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:59,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:14:59,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:14:59,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:59,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-12-21 13:14:59,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,726 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:14:59,726 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:59,726 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [958507604] [2021-12-21 13:14:59,726 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [958507604] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:59,727 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:59,727 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:14:59,727 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [756441575] [2021-12-21 13:14:59,727 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:59,727 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:14:59,727 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:59,728 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:14:59,728 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:59,728 INFO L87 Difference]: Start difference. First operand 266 states and 331 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:14:59,923 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:59,923 INFO L93 Difference]: Finished difference Result 542 states and 695 transitions. [2021-12-21 13:14:59,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-21 13:14:59,924 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2021-12-21 13:14:59,924 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:59,925 INFO L225 Difference]: With dead ends: 542 [2021-12-21 13:14:59,925 INFO L226 Difference]: Without dead ends: 284 [2021-12-21 13:14:59,925 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:14:59,926 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 129 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 280 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 327 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 280 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:59,926 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [130 Valid, 239 Invalid, 327 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 280 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:14:59,927 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 284 states. [2021-12-21 13:14:59,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 284 to 272. [2021-12-21 13:14:59,936 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 272 states, 211 states have (on average 1.2369668246445498) internal successors, (261), 226 states have internal predecessors, (261), 30 states have call successors, (30), 24 states have call predecessors, (30), 30 states have return successors, (46), 32 states have call predecessors, (46), 30 states have call successors, (46) [2021-12-21 13:14:59,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 272 states to 272 states and 337 transitions. [2021-12-21 13:14:59,937 INFO L78 Accepts]: Start accepts. Automaton has 272 states and 337 transitions. Word has length 57 [2021-12-21 13:14:59,937 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:59,937 INFO L470 AbstractCegarLoop]: Abstraction has 272 states and 337 transitions. [2021-12-21 13:14:59,937 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:14:59,937 INFO L276 IsEmpty]: Start isEmpty. Operand 272 states and 337 transitions. [2021-12-21 13:14:59,938 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2021-12-21 13:14:59,938 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:59,938 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:59,938 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-21 13:14:59,939 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:59,939 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:59,939 INFO L85 PathProgramCache]: Analyzing trace with hash 412634824, now seen corresponding path program 1 times [2021-12-21 13:14:59,939 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:59,939 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [367183789] [2021-12-21 13:14:59,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:59,939 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:59,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:14:59,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:14:59,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:59,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-12-21 13:14:59,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,983 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:14:59,983 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:59,983 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [367183789] [2021-12-21 13:14:59,983 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [367183789] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:59,983 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:59,983 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:14:59,983 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1585104149] [2021-12-21 13:14:59,984 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:59,984 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:14:59,984 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:59,984 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:14:59,984 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:14:59,985 INFO L87 Difference]: Start difference. First operand 272 states and 337 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:15:00,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:00,235 INFO L93 Difference]: Finished difference Result 770 states and 997 transitions. [2021-12-21 13:15:00,235 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-21 13:15:00,235 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2021-12-21 13:15:00,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:00,237 INFO L225 Difference]: With dead ends: 770 [2021-12-21 13:15:00,237 INFO L226 Difference]: Without dead ends: 506 [2021-12-21 13:15:00,238 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:15:00,238 INFO L933 BasicCegarLoop]: 136 mSDtfsCounter, 286 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 259 mSolverCounterSat, 118 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 258 SdHoareTripleChecker+Invalid, 377 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 118 IncrementalHoareTripleChecker+Valid, 259 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:00,238 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [288 Valid, 258 Invalid, 377 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [118 Valid, 259 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:15:00,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 506 states. [2021-12-21 13:15:00,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 506 to 504. [2021-12-21 13:15:00,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 504 states, 385 states have (on average 1.2103896103896103) internal successors, (466), 408 states have internal predecessors, (466), 60 states have call successors, (60), 56 states have call predecessors, (60), 58 states have return successors, (103), 60 states have call predecessors, (103), 60 states have call successors, (103) [2021-12-21 13:15:00,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 504 states to 504 states and 629 transitions. [2021-12-21 13:15:00,286 INFO L78 Accepts]: Start accepts. Automaton has 504 states and 629 transitions. Word has length 57 [2021-12-21 13:15:00,286 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:00,286 INFO L470 AbstractCegarLoop]: Abstraction has 504 states and 629 transitions. [2021-12-21 13:15:00,286 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 4 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:15:00,286 INFO L276 IsEmpty]: Start isEmpty. Operand 504 states and 629 transitions. [2021-12-21 13:15:00,287 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-21 13:15:00,287 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:00,287 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:00,287 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-21 13:15:00,288 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:00,288 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:00,288 INFO L85 PathProgramCache]: Analyzing trace with hash -166866194, now seen corresponding path program 1 times [2021-12-21 13:15:00,288 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:00,288 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1979977401] [2021-12-21 13:15:00,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:00,288 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:00,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:15:00,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:15:00,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-21 13:15:00,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:00,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-21 13:15:00,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,379 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-21 13:15:00,380 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:00,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1979977401] [2021-12-21 13:15:00,380 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1979977401] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:15:00,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1424627644] [2021-12-21 13:15:00,380 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:00,380 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:00,380 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:00,396 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:00,424 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:15:00,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,498 INFO L263 TraceCheckSpWp]: Trace formula consists of 387 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-21 13:15:00,502 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:00,678 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:00,678 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:15:00,679 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1424627644] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:00,679 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:15:00,679 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2021-12-21 13:15:00,679 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1086328078] [2021-12-21 13:15:00,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:00,680 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:15:00,680 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:00,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:15:00,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=264, Unknown=0, NotChecked=0, Total=306 [2021-12-21 13:15:00,680 INFO L87 Difference]: Start difference. First operand 504 states and 629 transitions. Second operand has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-21 13:15:00,764 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:00,765 INFO L93 Difference]: Finished difference Result 978 states and 1227 transitions. [2021-12-21 13:15:00,765 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:15:00,765 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 61 [2021-12-21 13:15:00,765 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:00,767 INFO L225 Difference]: With dead ends: 978 [2021-12-21 13:15:00,767 INFO L226 Difference]: Without dead ends: 482 [2021-12-21 13:15:00,768 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2021-12-21 13:15:00,768 INFO L933 BasicCegarLoop]: 172 mSDtfsCounter, 67 mSDsluCounter, 501 mSDsCounter, 0 mSdLazyCounter, 113 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 673 SdHoareTripleChecker+Invalid, 115 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 113 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:00,769 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [69 Valid, 673 Invalid, 115 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:00,769 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 482 states. [2021-12-21 13:15:00,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 482 to 480. [2021-12-21 13:15:00,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 480 states, 366 states have (on average 1.1939890710382515) internal successors, (437), 388 states have internal predecessors, (437), 58 states have call successors, (58), 54 states have call predecessors, (58), 55 states have return successors, (89), 57 states have call predecessors, (89), 58 states have call successors, (89) [2021-12-21 13:15:00,787 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 480 states to 480 states and 584 transitions. [2021-12-21 13:15:00,788 INFO L78 Accepts]: Start accepts. Automaton has 480 states and 584 transitions. Word has length 61 [2021-12-21 13:15:00,788 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:00,788 INFO L470 AbstractCegarLoop]: Abstraction has 480 states and 584 transitions. [2021-12-21 13:15:00,788 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-21 13:15:00,788 INFO L276 IsEmpty]: Start isEmpty. Operand 480 states and 584 transitions. [2021-12-21 13:15:00,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2021-12-21 13:15:00,789 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:00,790 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:00,809 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 13:15:01,003 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-21 13:15:01,004 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:01,004 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:01,004 INFO L85 PathProgramCache]: Analyzing trace with hash 1972813179, now seen corresponding path program 1 times [2021-12-21 13:15:01,004 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:01,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [667456515] [2021-12-21 13:15:01,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:01,004 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:01,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:15:01,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:15:01,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:15:01,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:01,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:15:01,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-21 13:15:01,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-12-21 13:15:01,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:01,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-21 13:15:01,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,106 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-21 13:15:01,106 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:01,106 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [667456515] [2021-12-21 13:15:01,106 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [667456515] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:15:01,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [745895826] [2021-12-21 13:15:01,107 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:01,107 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:01,107 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:01,124 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:01,125 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-21 13:15:01,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,209 INFO L263 TraceCheckSpWp]: Trace formula consists of 487 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-21 13:15:01,215 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:01,382 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:15:01,382 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:15:01,382 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [745895826] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:01,382 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:15:01,382 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2021-12-21 13:15:01,382 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [404799948] [2021-12-21 13:15:01,382 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:01,383 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:15:01,383 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:01,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:15:01,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:15:01,383 INFO L87 Difference]: Start difference. First operand 480 states and 584 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-21 13:15:01,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:01,425 INFO L93 Difference]: Finished difference Result 728 states and 903 transitions. [2021-12-21 13:15:01,425 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:15:01,425 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 100 [2021-12-21 13:15:01,426 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:01,428 INFO L225 Difference]: With dead ends: 728 [2021-12-21 13:15:01,428 INFO L226 Difference]: Without dead ends: 726 [2021-12-21 13:15:01,429 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:15:01,429 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 45 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:01,429 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [45 Valid, 190 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:01,430 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 726 states. [2021-12-21 13:15:01,451 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 726 to 584. [2021-12-21 13:15:01,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 584 states, 447 states have (on average 1.203579418344519) internal successors, (538), 473 states have internal predecessors, (538), 70 states have call successors, (70), 65 states have call predecessors, (70), 66 states have return successors, (115), 67 states have call predecessors, (115), 70 states have call successors, (115) [2021-12-21 13:15:01,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 584 states to 584 states and 723 transitions. [2021-12-21 13:15:01,456 INFO L78 Accepts]: Start accepts. Automaton has 584 states and 723 transitions. Word has length 100 [2021-12-21 13:15:01,457 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:01,457 INFO L470 AbstractCegarLoop]: Abstraction has 584 states and 723 transitions. [2021-12-21 13:15:01,457 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-21 13:15:01,458 INFO L276 IsEmpty]: Start isEmpty. Operand 584 states and 723 transitions. [2021-12-21 13:15:01,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2021-12-21 13:15:01,464 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:01,464 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:01,495 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-21 13:15:01,696 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-21 13:15:01,697 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:01,697 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:01,697 INFO L85 PathProgramCache]: Analyzing trace with hash 1133837867, now seen corresponding path program 1 times [2021-12-21 13:15:01,697 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:01,697 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1662328914] [2021-12-21 13:15:01,698 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:01,698 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:01,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:15:01,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:15:01,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:15:01,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:01,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:15:01,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-21 13:15:01,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-12-21 13:15:01,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:15:01,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:01,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:01,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2021-12-21 13:15:01,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:01,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2021-12-21 13:15:01,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,863 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 59 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2021-12-21 13:15:01,863 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:01,864 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1662328914] [2021-12-21 13:15:01,864 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1662328914] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:15:01,864 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [288134352] [2021-12-21 13:15:01,864 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:01,864 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:01,864 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:01,880 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:01,908 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-21 13:15:02,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,019 INFO L263 TraceCheckSpWp]: Trace formula consists of 597 conjuncts, 11 conjunts are in the unsatisfiable core [2021-12-21 13:15:02,032 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:02,498 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 82 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:15:02,499 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:15:02,779 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 60 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2021-12-21 13:15:02,780 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [288134352] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:15:02,780 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:15:02,780 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 18 [2021-12-21 13:15:02,780 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [939520509] [2021-12-21 13:15:02,780 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:15:02,780 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2021-12-21 13:15:02,780 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:02,781 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2021-12-21 13:15:02,781 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=67, Invalid=239, Unknown=0, NotChecked=0, Total=306 [2021-12-21 13:15:02,781 INFO L87 Difference]: Start difference. First operand 584 states and 723 transitions. Second operand has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2021-12-21 13:15:04,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:04,618 INFO L93 Difference]: Finished difference Result 2158 states and 3302 transitions. [2021-12-21 13:15:04,618 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2021-12-21 13:15:04,619 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 142 [2021-12-21 13:15:04,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:04,626 INFO L225 Difference]: With dead ends: 2158 [2021-12-21 13:15:04,626 INFO L226 Difference]: Without dead ends: 1674 [2021-12-21 13:15:04,629 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 362 GetRequests, 308 SyntacticMatches, 5 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 621 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=616, Invalid=1934, Unknown=0, NotChecked=0, Total=2550 [2021-12-21 13:15:04,630 INFO L933 BasicCegarLoop]: 262 mSDtfsCounter, 1092 mSDsluCounter, 710 mSDsCounter, 0 mSdLazyCounter, 1982 mSolverCounterSat, 627 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1104 SdHoareTripleChecker+Valid, 972 SdHoareTripleChecker+Invalid, 2609 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 627 IncrementalHoareTripleChecker+Valid, 1982 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:04,630 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1104 Valid, 972 Invalid, 2609 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [627 Valid, 1982 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-12-21 13:15:04,631 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1674 states. [2021-12-21 13:15:04,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1674 to 1075. [2021-12-21 13:15:04,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1075 states, 822 states have (on average 1.1922141119221412) internal successors, (980), 870 states have internal predecessors, (980), 132 states have call successors, (132), 110 states have call predecessors, (132), 120 states have return successors, (227), 128 states have call predecessors, (227), 132 states have call successors, (227) [2021-12-21 13:15:04,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1075 states to 1075 states and 1339 transitions. [2021-12-21 13:15:04,684 INFO L78 Accepts]: Start accepts. Automaton has 1075 states and 1339 transitions. Word has length 142 [2021-12-21 13:15:04,684 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:04,684 INFO L470 AbstractCegarLoop]: Abstraction has 1075 states and 1339 transitions. [2021-12-21 13:15:04,684 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2021-12-21 13:15:04,684 INFO L276 IsEmpty]: Start isEmpty. Operand 1075 states and 1339 transitions. [2021-12-21 13:15:04,687 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2021-12-21 13:15:04,687 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:04,687 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:04,717 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2021-12-21 13:15:04,905 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:04,905 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:04,905 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:04,905 INFO L85 PathProgramCache]: Analyzing trace with hash 1788073835, now seen corresponding path program 1 times [2021-12-21 13:15:04,905 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:04,905 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [791242473] [2021-12-21 13:15:04,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:04,906 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:04,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:15:04,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-21 13:15:04,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:15:04,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:04,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:15:04,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2021-12-21 13:15:04,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-12-21 13:15:04,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:15:04,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:04,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:04,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2021-12-21 13:15:04,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:04,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2021-12-21 13:15:04,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:04,994 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2021-12-21 13:15:04,994 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:04,994 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [791242473] [2021-12-21 13:15:04,994 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [791242473] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:04,994 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:04,994 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2021-12-21 13:15:04,995 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1650617535] [2021-12-21 13:15:04,995 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:04,995 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-12-21 13:15:04,995 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:04,995 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-12-21 13:15:04,995 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2021-12-21 13:15:04,995 INFO L87 Difference]: Start difference. First operand 1075 states and 1339 transitions. Second operand has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-21 13:15:05,337 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:05,337 INFO L93 Difference]: Finished difference Result 1530 states and 1872 transitions. [2021-12-21 13:15:05,338 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-21 13:15:05,338 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 142 [2021-12-21 13:15:05,338 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:05,338 INFO L225 Difference]: With dead ends: 1530 [2021-12-21 13:15:05,338 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:15:05,342 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=80, Invalid=300, Unknown=0, NotChecked=0, Total=380 [2021-12-21 13:15:05,342 INFO L933 BasicCegarLoop]: 85 mSDtfsCounter, 271 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 502 mSolverCounterSat, 105 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 272 SdHoareTripleChecker+Valid, 277 SdHoareTripleChecker+Invalid, 607 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 105 IncrementalHoareTripleChecker+Valid, 502 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:05,343 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [272 Valid, 277 Invalid, 607 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [105 Valid, 502 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:15:05,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:15:05,343 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:15:05,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:15:05,343 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:15:05,343 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 142 [2021-12-21 13:15:05,344 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:05,344 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:15:05,344 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2021-12-21 13:15:05,344 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:15:05,344 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:15:05,346 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:15:05,346 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-12-21 13:15:05,348 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:15:10,051 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 629 635) no Hoare annotation was computed. [2021-12-21 13:15:10,051 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 629 635) the Hoare annotation is: true [2021-12-21 13:15:10,051 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse4 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3))) [2021-12-21 13:15:10,052 INFO L858 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2021-12-21 13:15:10,052 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2021-12-21 13:15:10,052 INFO L861 garLoopResultBuilder]: At program point L929(lines 904 933) the Hoare annotation is: true [2021-12-21 13:15:10,052 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 904 933) no Hoare annotation was computed. [2021-12-21 13:15:10,052 INFO L858 garLoopResultBuilder]: For program point L925(line 925) no Hoare annotation was computed. [2021-12-21 13:15:10,052 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 904 933) the Hoare annotation is: true [2021-12-21 13:15:10,052 INFO L858 garLoopResultBuilder]: For program point L918(lines 918 922) no Hoare annotation was computed. [2021-12-21 13:15:10,052 INFO L861 garLoopResultBuilder]: At program point L918-1(lines 918 922) the Hoare annotation is: true [2021-12-21 13:15:10,052 INFO L858 garLoopResultBuilder]: For program point L915(line 915) no Hoare annotation was computed. [2021-12-21 13:15:10,052 INFO L861 garLoopResultBuilder]: At program point L914-2(lines 914 928) the Hoare annotation is: true [2021-12-21 13:15:10,052 INFO L861 garLoopResultBuilder]: At program point L910(line 910) the Hoare annotation is: true [2021-12-21 13:15:10,052 INFO L858 garLoopResultBuilder]: For program point L910-1(line 910) no Hoare annotation was computed. [2021-12-21 13:15:10,052 INFO L858 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2021-12-21 13:15:10,053 INFO L858 garLoopResultBuilder]: For program point L609-1(lines 608 627) no Hoare annotation was computed. [2021-12-21 13:15:10,053 INFO L858 garLoopResultBuilder]: For program point L671(lines 671 679) no Hoare annotation was computed. [2021-12-21 13:15:10,053 INFO L854 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4) (or (and .cse2 (= ~methAndRunningLastTime~0 0) .cse3) .cse5 .cse6 .cse1 .cse4) (or .cse7 .cse5 .cse6 .cse1) (or .cse7 .cse5 .cse0 .cse1))) [2021-12-21 13:15:10,053 INFO L858 garLoopResultBuilder]: For program point L667(lines 667 684) no Hoare annotation was computed. [2021-12-21 13:15:10,053 INFO L854 garLoopResultBuilder]: At program point L812(lines 797 815) the Hoare annotation is: (let ((.cse11 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse3 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse5 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse6 (let ((.cse12 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse12) (and (not .cse12) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0))))) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse7 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) .cse7 .cse8) (or .cse9 .cse10 .cse11 .cse7) (or .cse10 .cse11 (and .cse1 .cse2 (= ~methAndRunningLastTime~0 0) .cse3 .cse4 .cse5 .cse6) .cse7 .cse8) (or .cse9 .cse10 .cse0 .cse7))) [2021-12-21 13:15:10,053 INFO L854 garLoopResultBuilder]: At program point L841(line 841) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0)) (.cse12 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse10 (<= 2 ~waterLevel~0)) (.cse2 (not .cse5)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (<= 1 |timeShift_processEnvironment_~tmp~5#1|)) (.cse14 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse15 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse11 (not .cse12)) (.cse18 (not (<= 2 |old(~waterLevel~0)|))) (.cse19 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse20 (let ((.cse22 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse22) (and (not .cse22) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0))))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse17 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (not .cse9))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (and .cse5 .cse10 .cse6 .cse8)) (or .cse0 .cse1 .cse11 (and .cse3 .cse4 .cse12 .cse6 .cse7 .cse8) .cse9) (let ((.cse16 (or (and .cse19 .cse4 .cse5 .cse17 .cse8 .cse20) (and .cse3 .cse4 .cse5 .cse17 .cse8)))) (or (and .cse13 .cse14 .cse15 .cse16) (and .cse5 .cse10 .cse17 .cse8) .cse2 (and .cse3 .cse16) .cse9 .cse18)) (let ((.cse21 (or (and .cse19 .cse4 .cse12 .cse17 .cse20) (and .cse3 .cse4 .cse12 .cse17 .cse8)))) (or .cse1 (and .cse13 .cse21 .cse14 .cse15) .cse11 (and .cse3 .cse21) .cse9 .cse18))))) [2021-12-21 13:15:10,053 INFO L858 garLoopResultBuilder]: For program point L841-1(line 841) no Hoare annotation was computed. [2021-12-21 13:15:10,053 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 605 628) no Hoare annotation was computed. [2021-12-21 13:15:10,054 INFO L854 garLoopResultBuilder]: At program point L738(lines 733 741) the Hoare annotation is: (let ((.cse4 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 0)) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) .cse5) (or .cse6 .cse5 .cse7) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse3 .cse4 (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse5 .cse7) (or .cse0 .cse1 .cse6 .cse5))) [2021-12-21 13:15:10,054 INFO L854 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and .cse2 .cse3 (= ~methAndRunningLastTime~0 0) .cse4) .cse5 .cse6) (or .cse7 .cse5 (and .cse2 .cse3 .cse4) .cse6) (or .cse8 .cse0 .cse1 .cse5) (or .cse8 .cse0 .cse7 .cse5))) [2021-12-21 13:15:10,054 INFO L854 garLoopResultBuilder]: At program point L677(line 677) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse1 .cse2) (or .cse5 .cse3 .cse4 .cse1) (or .cse5 .cse3 .cse0 .cse1))) [2021-12-21 13:15:10,054 INFO L854 garLoopResultBuilder]: At program point L719(lines 714 721) the Hoare annotation is: (let ((.cse1 (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (let ((.cse7 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse7) (and (not .cse7) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0)))))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse1 .cse2 .cse3) (or .cse6 .cse4 .cse5 .cse2) (or .cse6 .cse4 .cse0 .cse2))) [2021-12-21 13:15:10,054 INFO L858 garLoopResultBuilder]: For program point L847(lines 847 857) no Hoare annotation was computed. [2021-12-21 13:15:10,054 INFO L858 garLoopResultBuilder]: For program point L1004(line 1004) no Hoare annotation was computed. [2021-12-21 13:15:10,054 INFO L858 garLoopResultBuilder]: For program point L843(lines 843 860) no Hoare annotation was computed. [2021-12-21 13:15:10,054 INFO L854 garLoopResultBuilder]: At program point L682(line 682) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0)) (.cse3 (= ~methaneLevelCritical~0 0))) (let ((.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse3)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse4 (not .cse5))) (and (or .cse0 (and .cse1 .cse2 .cse3 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) .cse4) .cse5 .cse6) (or .cse7 .cse8 (and .cse1 .cse2) .cse5 .cse6) (or .cse9 .cse7 .cse8 .cse5 (and .cse2 .cse10 .cse11)) (or .cse9 .cse7 .cse0 (and .cse1 .cse2 .cse3 .cse10 .cse11 .cse4) .cse5)))) [2021-12-21 13:15:10,054 INFO L854 garLoopResultBuilder]: At program point L843-1(lines 835 863) the Hoare annotation is: (let ((.cse17 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (<= 2 ~waterLevel~0)) (.cse2 (not .cse17)) (.cse5 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (<= 1 |timeShift_processEnvironment_~tmp~5#1|)) (.cse19 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse14 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse11 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse15 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse20 (let ((.cse21 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse21) (and (not .cse21) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0))))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse8 (= 0 ~systemActive~0)) (.cse16 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse6) .cse8) (or .cse0 .cse1 .cse9 (and .cse10 .cse3 .cse4 .cse6) .cse8) (let ((.cse12 (let ((.cse18 (not .cse8))) (or (and .cse10 .cse3 .cse4 .cse17 .cse5 .cse11 .cse18) (and .cse19 .cse3 .cse4 .cse17 .cse5 .cse11 .cse18 .cse20))))) (or (and .cse4 .cse7 .cse5 .cse11) (and .cse10 .cse12) (and .cse13 .cse12 .cse14 .cse15) .cse2 .cse8 .cse16)) (or .cse1 (and .cse13 .cse19 .cse3 .cse4 .cse14 .cse11 .cse15 .cse20) .cse9 (and .cse10 .cse3) .cse8 .cse16)))) [2021-12-21 13:15:10,055 INFO L854 garLoopResultBuilder]: At program point L682-1(lines 663 687) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0)) (.cse12 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse10 (<= 2 ~waterLevel~0)) (.cse2 (not .cse5)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (<= 1 |timeShift_processEnvironment_~tmp~5#1|)) (.cse14 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse15 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse11 (not .cse12)) (.cse18 (not (<= 2 |old(~waterLevel~0)|))) (.cse19 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse20 (let ((.cse22 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) .cse22) (and (not .cse22) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0))))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse17 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (not .cse9))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (and .cse5 .cse10 .cse6 .cse8)) (or .cse0 .cse1 .cse11 (and .cse3 .cse4 .cse12 .cse6 .cse7 .cse8) .cse9) (let ((.cse16 (or (and .cse19 .cse4 .cse5 .cse17 .cse8 .cse20) (and .cse3 .cse4 .cse5 .cse17 .cse8)))) (or (and .cse13 .cse14 .cse15 .cse16) (and .cse5 .cse10 .cse17 .cse8) .cse2 (and .cse3 .cse16) .cse9 .cse18)) (let ((.cse21 (or (and .cse19 .cse4 .cse12 .cse17 .cse20) (and .cse3 .cse4 .cse12 .cse17 .cse8)))) (or .cse1 (and .cse13 .cse21 .cse14 .cse15) .cse11 (and .cse3 .cse21) .cse9 .cse18))))) [2021-12-21 13:15:10,055 INFO L858 garLoopResultBuilder]: For program point L616-1(lines 616 622) no Hoare annotation was computed. [2021-12-21 13:15:10,055 INFO L858 garLoopResultBuilder]: For program point L806(lines 806 810) no Hoare annotation was computed. [2021-12-21 13:15:10,055 INFO L858 garLoopResultBuilder]: For program point L806-2(lines 806 810) no Hoare annotation was computed. [2021-12-21 13:15:10,055 INFO L858 garLoopResultBuilder]: For program point L848(lines 848 854) no Hoare annotation was computed. [2021-12-21 13:15:10,055 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 605 628) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) .cse8 .cse9)) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8 .cse9)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse1 .cse2 .cse6) (or .cse4 .cse5 .cse7 .cse2 .cse6) (or .cse5 .cse7 .cse0 .cse2 .cse3)))) [2021-12-21 13:15:10,055 INFO L854 garLoopResultBuilder]: At program point L1005(lines 1000 1007) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse1 .cse2) (or .cse5 .cse3 .cse4 .cse1) (or .cse5 .cse3 .cse0 .cse1))) [2021-12-21 13:15:10,055 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 605 628) no Hoare annotation was computed. [2021-12-21 13:15:10,055 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1004) no Hoare annotation was computed. [2021-12-21 13:15:10,055 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 96 104) the Hoare annotation is: true [2021-12-21 13:15:10,055 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 96 104) no Hoare annotation was computed. [2021-12-21 13:15:10,056 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2021-12-21 13:15:10,056 INFO L854 garLoopResultBuilder]: At program point L832(lines 827 834) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:10,056 INFO L854 garLoopResultBuilder]: At program point L890(lines 886 892) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:10,056 INFO L858 garLoopResultBuilder]: For program point L560(lines 560 566) no Hoare annotation was computed. [2021-12-21 13:15:10,060 INFO L858 garLoopResultBuilder]: For program point L560-1(lines 560 566) no Hoare annotation was computed. [2021-12-21 13:15:10,060 INFO L861 garLoopResultBuilder]: At program point L973(lines 965 975) the Hoare annotation is: true [2021-12-21 13:15:10,060 INFO L854 garLoopResultBuilder]: At program point L585(lines 540 587) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5) (and .cse1 .cse6 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2021-12-21 13:15:10,061 INFO L854 garLoopResultBuilder]: At program point L552(line 552) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5) (and .cse1 .cse6 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2021-12-21 13:15:10,070 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:15:10,070 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:15:10,070 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:15:10,071 INFO L858 garLoopResultBuilder]: For program point L986(lines 986 993) no Hoare annotation was computed. [2021-12-21 13:15:10,071 INFO L858 garLoopResultBuilder]: For program point L986-2(lines 986 993) no Hoare annotation was computed. [2021-12-21 13:15:10,071 INFO L854 garLoopResultBuilder]: At program point L821(lines 816 823) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse8 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse3 .cse8 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse2 .cse3 .cse8 .cse4 .cse5 .cse6))) [2021-12-21 13:15:10,071 INFO L854 garLoopResultBuilder]: At program point L883(lines 879 885) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:10,071 INFO L861 garLoopResultBuilder]: At program point L995(lines 976 998) the Hoare annotation is: true [2021-12-21 13:15:10,072 INFO L854 garLoopResultBuilder]: At program point L962(lines 958 964) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:10,072 INFO L858 garLoopResultBuilder]: For program point L578(lines 578 582) no Hoare annotation was computed. [2021-12-21 13:15:10,073 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:15:10,073 INFO L854 garLoopResultBuilder]: At program point L578-2(lines 570 583) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse8 (<= 2 ~waterLevel~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse3 .cse8 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse7 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse2 .cse3 .cse8 .cse4 .cse5 .cse6))) [2021-12-21 13:15:10,073 INFO L858 garLoopResultBuilder]: For program point L541(lines 540 587) no Hoare annotation was computed. [2021-12-21 13:15:10,073 INFO L858 garLoopResultBuilder]: For program point L570(lines 570 583) no Hoare annotation was computed. [2021-12-21 13:15:10,073 INFO L854 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5) (and .cse1 .cse6 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse6 .cse2 .cse3 .cse4 .cse5))) [2021-12-21 13:15:10,074 INFO L861 garLoopResultBuilder]: At program point L591(lines 530 595) the Hoare annotation is: true [2021-12-21 13:15:10,074 INFO L858 garLoopResultBuilder]: For program point L550(lines 550 556) no Hoare annotation was computed. [2021-12-21 13:15:10,074 INFO L858 garLoopResultBuilder]: For program point L550-1(lines 550 556) no Hoare annotation was computed. [2021-12-21 13:15:10,074 INFO L858 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2021-12-21 13:15:10,074 INFO L854 garLoopResultBuilder]: At program point L588(lines 539 589) the Hoare annotation is: false [2021-12-21 13:15:10,074 INFO L854 garLoopResultBuilder]: At program point L898(lines 893 901) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2021-12-21 13:15:10,075 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 637 661) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~waterLevel~0 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3 .cse5) (or .cse6 .cse7 .cse2 .cse3) (or .cse6 .cse7 .cse4 .cse3 .cse5))) [2021-12-21 13:15:10,075 INFO L858 garLoopResultBuilder]: For program point L704(lines 704 710) no Hoare annotation was computed. [2021-12-21 13:15:10,075 INFO L854 garLoopResultBuilder]: At program point L704-2(lines 697 713) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse5 .cse6 .cse1 .cse2) (or (and (= ~pumpRunning~0 0) .cse6 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|)) .cse5 .cse3 .cse2 .cse4))) [2021-12-21 13:15:10,075 INFO L854 garLoopResultBuilder]: At program point L793(lines 778 796) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~pumpRunning~0 0)) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)) (.cse13 (= ~methaneLevelCritical~0 0)) (.cse12 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (.cse6 (not .cse3))) (let ((.cse1 (not (= ~waterLevel~0 0))) (.cse0 (and .cse4 .cse5 .cse11 .cse13 .cse12 .cse6)) (.cse2 (not .cse13)) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and .cse4 .cse5 (<= 2 ~waterLevel~0) .cse6)) (.cse8 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (and .cse4 .cse5 .cse6) .cse1 .cse7 .cse3 .cse8) (or .cse9 .cse0 .cse2 .cse10 .cse3) (or .cse9 (and .cse4 .cse5 .cse11 .cse12 .cse6) .cse7 .cse10 .cse3 .cse8))))) [2021-12-21 13:15:10,075 INFO L854 garLoopResultBuilder]: At program point L729(lines 722 732) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse0 (not (= ~waterLevel~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse9 (not .cse2)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse5 .cse1 (and .cse6 .cse7 .cse8 .cse9) .cse2) (or .cse5 (and .cse6 .cse7 .cse8 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) .cse9) .cse3 .cse2 .cse4)))) [2021-12-21 13:15:10,075 INFO L854 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse0 (not (= ~waterLevel~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) (not .cse2))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse5 .cse1 .cse6 .cse2) (or .cse5 .cse3 .cse6 .cse2 .cse4)))) [2021-12-21 13:15:10,076 INFO L858 garLoopResultBuilder]: For program point L727-1(line 727) no Hoare annotation was computed. [2021-12-21 13:15:10,076 INFO L858 garLoopResultBuilder]: For program point L787(lines 787 791) no Hoare annotation was computed. [2021-12-21 13:15:10,076 INFO L858 garLoopResultBuilder]: For program point L787-2(lines 787 791) no Hoare annotation was computed. [2021-12-21 13:15:10,076 INFO L858 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2021-12-21 13:15:10,076 INFO L854 garLoopResultBuilder]: At program point L651(line 651) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse8 (= ~methaneLevelCritical~0 0)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0)) (.cse12 (not .cse3))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and .cse9 .cse10 .cse11 .cse12)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= ~methAndRunningLastTime~0 0))) (.cse1 (and .cse9 .cse10 .cse11 .cse8 .cse12)) (.cse7 (not (= ~waterLevel~0 0))) (.cse2 (not .cse8))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse3 .cse6) (or .cse7 .cse4 .cse5 .cse3 .cse6) (or .cse1 .cse7 .cse2 .cse3))))) [2021-12-21 13:15:10,076 INFO L858 garLoopResultBuilder]: For program point L645(lines 645 653) no Hoare annotation was computed. [2021-12-21 13:15:10,076 INFO L858 garLoopResultBuilder]: For program point L641(lines 641 658) no Hoare annotation was computed. [2021-12-21 13:15:10,076 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 637 661) no Hoare annotation was computed. [2021-12-21 13:15:10,077 INFO L854 garLoopResultBuilder]: At program point L693(lines 688 695) the Hoare annotation is: (let ((.cse0 (not (= ~waterLevel~0 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse5 .cse3 .cse2 .cse4) (or .cse5 (<= 2 ~waterLevel~0) .cse1 .cse2))) [2021-12-21 13:15:10,077 INFO L854 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0)) (.cse10 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (.cse11 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not (= ~waterLevel~0 0))) (.cse7 (not .cse11)) (.cse9 (and .cse2 .cse3 .cse11 (not .cse4) .cse10)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (and .cse3 (<= 2 ~waterLevel~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse4 .cse9) (or .cse0 .cse7 .cse4 .cse9) (or .cse6 (and .cse3 .cse10) .cse1 .cse8 .cse4 .cse5)))) [2021-12-21 13:15:10,077 INFO L854 garLoopResultBuilder]: At program point L656(line 656) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (not (= ~waterLevel~0 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2 .cse4) (or .cse5 .cse6 .cse1 .cse2) (or .cse5 .cse6 .cse3 .cse2 .cse4))) [2021-12-21 13:15:10,077 INFO L858 garLoopResultBuilder]: For program point L656-1(lines 637 661) no Hoare annotation was computed. [2021-12-21 13:15:10,085 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2021-12-21 13:15:10,085 INFO L858 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2021-12-21 13:15:10,085 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse0 .cse1 .cse2 .cse3) (or .cse4 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2 .cse3))) [2021-12-21 13:15:10,087 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:10,088 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:15:10,155 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:15:10 BoogieIcfgContainer [2021-12-21 13:15:10,173 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:15:10,174 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:15:10,174 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:15:10,174 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:15:10,175 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:14:58" (3/4) ... [2021-12-21 13:15:10,177 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:15:10,182 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:15:10,195 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:15:10,195 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:15:10,195 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:15:10,195 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-21 13:15:10,196 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:15:10,196 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:15:10,207 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2021-12-21 13:15:10,207 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:15:10,207 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:15:10,208 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:15:10,208 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:15:10,208 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:15:10,209 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:15:10,236 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2021-12-21 13:15:10,237 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2021-12-21 13:15:10,237 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2021-12-21 13:15:10,237 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2021-12-21 13:15:10,238 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(methaneLevelCritical == 0) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:10,239 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime) && !(0 == systemActive))) || 0 == systemActive) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime) && !(0 == systemActive))) || 0 == systemActive)) && ((((((((1 <= tmp && 1 <= \result) && 1 <= tmp___0) && ((((((\result == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)))) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && ((((((\result == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || (((1 <= tmp && (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)))) && 1 <= \result) && 1 <= tmp___0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))))) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2021-12-21 13:15:10,240 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((methAndRunningLastTime == 0 && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2021-12-21 13:15:10,240 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && ((((((((methAndRunningLastTime == 0 && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) || (pumpRunning == \old(pumpRunning) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))))) || (((1 <= tmp && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))))) && 1 <= \result) && 1 <= tmp___0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2021-12-21 13:15:10,240 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && methaneLevelCritical <= \result) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2021-12-21 13:15:10,241 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || 0 == systemActive) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:10,241 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(methaneLevelCritical == 0) || 0 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:10,241 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp) && methaneLevelCritical <= \result) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2021-12-21 13:15:10,241 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && \result == 1))) && (((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && \result == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2021-12-21 13:15:10,241 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:10,255 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(methaneLevelCritical == 0) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:10,255 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:10,256 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && methaneLevelCritical == 0) && \result == 0) && !(0 == systemActive)) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && methaneLevelCritical == 0) && \result == 0) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2021-12-21 13:15:10,256 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(methaneLevelCritical == 0) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2021-12-21 13:15:10,307 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:15:10,307 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:15:10,308 INFO L158 Benchmark]: Toolchain (without parser) took 13049.53ms. Allocated memory was 119.5MB in the beginning and 243.3MB in the end (delta: 123.7MB). Free memory was 93.7MB in the beginning and 205.1MB in the end (delta: -111.4MB). Peak memory consumption was 12.2MB. Max. memory is 16.1GB. [2021-12-21 13:15:10,308 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 119.5MB. Free memory is still 78.2MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:15:10,308 INFO L158 Benchmark]: CACSL2BoogieTranslator took 333.44ms. Allocated memory is still 119.5MB. Free memory was 93.7MB in the beginning and 87.2MB in the end (delta: 6.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-21 13:15:10,309 INFO L158 Benchmark]: Boogie Procedure Inliner took 65.19ms. Allocated memory is still 119.5MB. Free memory was 87.2MB in the beginning and 84.4MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:10,310 INFO L158 Benchmark]: Boogie Preprocessor took 47.80ms. Allocated memory is still 119.5MB. Free memory was 84.4MB in the beginning and 82.9MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:15:10,311 INFO L158 Benchmark]: RCFGBuilder took 407.39ms. Allocated memory is still 119.5MB. Free memory was 82.9MB in the beginning and 65.9MB in the end (delta: 17.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-12-21 13:15:10,311 INFO L158 Benchmark]: TraceAbstraction took 12058.09ms. Allocated memory was 119.5MB in the beginning and 243.3MB in the end (delta: 123.7MB). Free memory was 65.5MB in the beginning and 211.4MB in the end (delta: -145.8MB). Peak memory consumption was 120.4MB. Max. memory is 16.1GB. [2021-12-21 13:15:10,311 INFO L158 Benchmark]: Witness Printer took 133.52ms. Allocated memory is still 243.3MB. Free memory was 211.4MB in the beginning and 205.1MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-21 13:15:10,313 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 119.5MB. Free memory is still 78.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 333.44ms. Allocated memory is still 119.5MB. Free memory was 93.7MB in the beginning and 87.2MB in the end (delta: 6.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 65.19ms. Allocated memory is still 119.5MB. Free memory was 87.2MB in the beginning and 84.4MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 47.80ms. Allocated memory is still 119.5MB. Free memory was 84.4MB in the beginning and 82.9MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 407.39ms. Allocated memory is still 119.5MB. Free memory was 82.9MB in the beginning and 65.9MB in the end (delta: 17.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 12058.09ms. Allocated memory was 119.5MB in the beginning and 243.3MB in the end (delta: 123.7MB). Free memory was 65.5MB in the beginning and 211.4MB in the end (delta: -145.8MB). Peak memory consumption was 120.4MB. Max. memory is 16.1GB. * Witness Printer took 133.52ms. Allocated memory is still 243.3MB. Free memory was 211.4MB in the beginning and 205.1MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1004]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.9s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2553 SdHoareTripleChecker+Valid, 2.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2519 mSDsluCounter, 4333 SdHoareTripleChecker+Invalid, 1.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2768 mSDsCounter, 1041 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3759 IncrementalHoareTripleChecker+Invalid, 4800 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1041 mSolverCounterUnsat, 1565 mSDtfsCounter, 3759 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 743 GetRequests, 587 SyntacticMatches, 6 SemanticMatches, 150 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 751 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1075occurred in iteration=12, InterpolantAutomatonStates: 133, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 13 MinimizatonAttempts, 804 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 1831 PreInvPairs, 2107 NumberOfFragments, 3377 HoareAnnotationTreeSize, 1831 FomulaSimplifications, 300 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 44 FomulaSimplificationsInter, 18188 FormulaSimplificationTreeSizeReductionInter, 4.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 1128 NumberOfCodeBlocks, 1128 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1253 ConstructedInterpolants, 0 QuantifiedInterpolants, 2451 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1471 ConjunctsInSsa, 26 ConjunctsInUnsatCore, 17 InterpolantComputations, 12 PerfectInterpolantSequences, 435/478 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 976]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 663]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime) && !(0 == systemActive))) || 0 == systemActive) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime) && !(0 == systemActive))) || 0 == systemActive)) && ((((((((1 <= tmp && 1 <= \result) && 1 <= tmp___0) && ((((((\result == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)))) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && ((((((\result == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || (((1 <= tmp && (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)))) && 1 <= \result) && 1 <= tmp___0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))))) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 697]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp) && methaneLevelCritical <= \result) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && ((((((((methAndRunningLastTime == 0 && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) || (pumpRunning == \old(pumpRunning) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))))) || (((1 <= tmp && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))))) && 1 <= \result) && 1 <= tmp___0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 1000]: Loop Invariant Derived loop invariant: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 733]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || 0 == systemActive) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && \result == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 904]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 714]: Loop Invariant Derived loop invariant: (((((!(methaneLevelCritical == 0) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || ((((((1 <= tmp && \result == 0) && pumpRunning == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && methaneLevelCritical <= \result) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 539]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 797]: Loop Invariant Derived loop invariant: (((((!(methaneLevelCritical == 0) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 816]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((methaneLevelCritical == 0 && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((methAndRunningLastTime == 0 && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((((!(methaneLevelCritical == 0) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: ((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(methaneLevelCritical == 0) || 0 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((((((!(waterLevel == 0) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && \result == 1))) && (((!(waterLevel == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(0 == systemActive)) && \result == 1))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 965]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 778]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && methaneLevelCritical == 0) && \result == 0) && !(0 == systemActive)) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && methaneLevelCritical == 0) && \result == 0) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && !(0 == systemActive))) || 0 == systemActive) || !(methAndRunningLastTime == 0)) RESULT: Ultimate proved your program to be correct! [2021-12-21 13:15:10,389 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE