./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 80b4c453e300455caffbcb636daccd3af095acb6ed433fb3111a61f5db77a0b9 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:14:56,639 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:14:56,645 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:14:56,684 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:14:56,685 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:14:56,686 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:14:56,687 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:14:56,688 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:14:56,689 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:14:56,689 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:14:56,690 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:14:56,691 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:14:56,691 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:14:56,693 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:14:56,694 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:14:56,695 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:14:56,696 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:14:56,699 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:14:56,700 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:14:56,703 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:14:56,704 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:14:56,705 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:14:56,706 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:14:56,706 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:14:56,708 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:14:56,708 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:14:56,708 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:14:56,709 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:14:56,709 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:14:56,710 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:14:56,710 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:14:56,710 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:14:56,711 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:14:56,711 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:14:56,712 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:14:56,712 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:14:56,713 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:14:56,713 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:14:56,713 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:14:56,714 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:14:56,714 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:14:56,715 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:14:56,733 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:14:56,734 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:14:56,735 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:14:56,735 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:14:56,735 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:14:56,736 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:14:56,736 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:14:56,736 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:14:56,737 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:14:56,737 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:14:56,737 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:14:56,738 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:14:56,738 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:14:56,738 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:14:56,738 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:14:56,738 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:14:56,738 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:14:56,738 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:14:56,739 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:14:56,739 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:14:56,739 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:14:56,739 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:14:56,739 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:14:56,739 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:14:56,740 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:14:56,740 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:14:56,740 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:14:56,740 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:14:56,740 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:14:56,740 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:14:56,740 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:14:56,741 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:14:56,741 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:14:56,741 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:14:56,741 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 80b4c453e300455caffbcb636daccd3af095acb6ed433fb3111a61f5db77a0b9 [2021-12-21 13:14:56,939 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:14:56,961 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:14:56,963 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:14:56,964 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:14:56,964 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:14:56,965 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c [2021-12-21 13:14:57,020 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/224683037/fcbd5d6841654192a839403cff8f0ad5/FLAG0fb62a889 [2021-12-21 13:14:57,392 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:14:57,393 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c [2021-12-21 13:14:57,407 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/224683037/fcbd5d6841654192a839403cff8f0ad5/FLAG0fb62a889 [2021-12-21 13:14:57,790 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/224683037/fcbd5d6841654192a839403cff8f0ad5 [2021-12-21 13:14:57,792 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:14:57,793 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:14:57,797 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:14:57,798 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:14:57,800 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:14:57,800 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,801 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7b9c1e66 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:57, skipping insertion in model container [2021-12-21 13:14:57,801 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:14:57" (1/1) ... [2021-12-21 13:14:57,805 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:14:57,852 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:14:57,955 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c[1605,1618] [2021-12-21 13:14:58,068 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:14:58,074 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:14:58,095 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c[1605,1618] [2021-12-21 13:14:58,133 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:14:58,144 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:14:58,147 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:58 WrapperNode [2021-12-21 13:14:58,148 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:14:58,149 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:14:58,149 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:14:58,149 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:14:58,154 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:58" (1/1) ... [2021-12-21 13:14:58,163 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:58" (1/1) ... [2021-12-21 13:14:58,182 INFO L137 Inliner]: procedures = 58, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 279 [2021-12-21 13:14:58,182 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:14:58,183 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:14:58,183 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:14:58,183 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:14:58,195 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:58" (1/1) ... [2021-12-21 13:14:58,196 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:58" (1/1) ... [2021-12-21 13:14:58,198 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:58" (1/1) ... [2021-12-21 13:14:58,205 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:58" (1/1) ... [2021-12-21 13:14:58,210 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:58" (1/1) ... [2021-12-21 13:14:58,214 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:58" (1/1) ... [2021-12-21 13:14:58,215 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:58" (1/1) ... [2021-12-21 13:14:58,217 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:14:58,218 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:14:58,218 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:14:58,218 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:14:58,231 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:58" (1/1) ... [2021-12-21 13:14:58,236 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:14:58,246 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:14:58,267 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:14:58,274 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:14:58,306 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:14:58,306 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:14:58,307 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:14:58,307 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:14:58,307 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:14:58,307 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-21 13:14:58,307 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-21 13:14:58,310 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:14:58,311 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:14:58,311 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:14:58,311 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:14:58,311 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:14:58,311 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:14:58,311 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-21 13:14:58,311 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-21 13:14:58,311 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:14:58,311 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:14:58,311 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:14:58,311 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:14:58,311 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:14:58,363 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:14:58,364 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:14:58,629 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:14:58,640 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:14:58,640 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:14:58,641 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:14:58 BoogieIcfgContainer [2021-12-21 13:14:58,642 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:14:58,643 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:14:58,643 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:14:58,645 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:14:58,646 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:14:57" (1/3) ... [2021-12-21 13:14:58,647 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@466ac8c5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:14:58, skipping insertion in model container [2021-12-21 13:14:58,647 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:58" (2/3) ... [2021-12-21 13:14:58,647 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@466ac8c5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:14:58, skipping insertion in model container [2021-12-21 13:14:58,647 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:14:58" (3/3) ... [2021-12-21 13:14:58,648 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product59.cil.c [2021-12-21 13:14:58,652 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:14:58,655 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:14:58,686 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:14:58,695 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:14:58,696 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:14:58,716 INFO L276 IsEmpty]: Start isEmpty. Operand has 100 states, 76 states have (on average 1.381578947368421) internal successors, (105), 85 states have internal predecessors, (105), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-21 13:14:58,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-21 13:14:58,721 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:58,722 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:58,722 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:58,726 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:58,727 INFO L85 PathProgramCache]: Analyzing trace with hash -13342285, now seen corresponding path program 1 times [2021-12-21 13:14:58,733 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:58,734 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [839610383] [2021-12-21 13:14:58,741 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:58,742 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:58,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-21 13:14:58,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:58,979 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:58,981 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:58,982 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [839610383] [2021-12-21 13:14:58,982 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [839610383] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:58,982 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:58,983 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:14:58,984 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1226494733] [2021-12-21 13:14:58,985 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:58,988 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:14:58,988 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:59,009 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:14:59,010 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:14:59,013 INFO L87 Difference]: Start difference. First operand has 100 states, 76 states have (on average 1.381578947368421) internal successors, (105), 85 states have internal predecessors, (105), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:59,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:59,055 INFO L93 Difference]: Finished difference Result 191 states and 260 transitions. [2021-12-21 13:14:59,056 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:14:59,057 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-21 13:14:59,058 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:59,067 INFO L225 Difference]: With dead ends: 191 [2021-12-21 13:14:59,067 INFO L226 Difference]: Without dead ends: 91 [2021-12-21 13:14:59,071 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:14:59,075 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:59,075 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 127 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:59,087 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2021-12-21 13:14:59,111 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2021-12-21 13:14:59,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 69 states have (on average 1.318840579710145) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-21 13:14:59,118 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 118 transitions. [2021-12-21 13:14:59,119 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 118 transitions. Word has length 25 [2021-12-21 13:14:59,120 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:59,120 INFO L470 AbstractCegarLoop]: Abstraction has 91 states and 118 transitions. [2021-12-21 13:14:59,120 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:59,121 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 118 transitions. [2021-12-21 13:14:59,122 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-21 13:14:59,123 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:59,123 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:59,123 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:14:59,124 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:59,126 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:59,126 INFO L85 PathProgramCache]: Analyzing trace with hash -1348159518, now seen corresponding path program 1 times [2021-12-21 13:14:59,126 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:59,127 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1722290903] [2021-12-21 13:14:59,127 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:59,127 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:59,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 13:14:59,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,209 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:59,210 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:59,210 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1722290903] [2021-12-21 13:14:59,210 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1722290903] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:59,210 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:59,210 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:14:59,211 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [69391319] [2021-12-21 13:14:59,211 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:59,212 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:14:59,212 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:59,212 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:14:59,213 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:59,213 INFO L87 Difference]: Start difference. First operand 91 states and 118 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:59,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:59,228 INFO L93 Difference]: Finished difference Result 143 states and 185 transitions. [2021-12-21 13:14:59,229 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:14:59,230 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-21 13:14:59,230 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:59,232 INFO L225 Difference]: With dead ends: 143 [2021-12-21 13:14:59,232 INFO L226 Difference]: Without dead ends: 82 [2021-12-21 13:14:59,236 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:59,237 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 16 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:59,238 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 189 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:59,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2021-12-21 13:14:59,245 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2021-12-21 13:14:59,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 71 states have internal predecessors, (84), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-21 13:14:59,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 106 transitions. [2021-12-21 13:14:59,247 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 106 transitions. Word has length 26 [2021-12-21 13:14:59,247 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:59,248 INFO L470 AbstractCegarLoop]: Abstraction has 82 states and 106 transitions. [2021-12-21 13:14:59,248 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:59,248 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 106 transitions. [2021-12-21 13:14:59,252 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-21 13:14:59,253 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:59,253 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:59,253 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:14:59,254 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:59,254 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:59,254 INFO L85 PathProgramCache]: Analyzing trace with hash 1571393351, now seen corresponding path program 1 times [2021-12-21 13:14:59,254 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:59,255 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1596266350] [2021-12-21 13:14:59,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:59,255 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:59,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:14:59,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,321 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:59,322 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:59,322 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1596266350] [2021-12-21 13:14:59,322 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1596266350] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:59,323 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:59,323 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:14:59,323 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1094620327] [2021-12-21 13:14:59,323 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:59,324 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:14:59,324 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:59,324 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:14:59,325 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:59,325 INFO L87 Difference]: Start difference. First operand 82 states and 106 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:59,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:59,358 INFO L93 Difference]: Finished difference Result 229 states and 302 transitions. [2021-12-21 13:14:59,359 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:14:59,359 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2021-12-21 13:14:59,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:59,363 INFO L225 Difference]: With dead ends: 229 [2021-12-21 13:14:59,363 INFO L226 Difference]: Without dead ends: 155 [2021-12-21 13:14:59,365 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:59,372 INFO L933 BasicCegarLoop]: 131 mSDtfsCounter, 85 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:59,373 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [85 Valid, 226 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:59,374 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2021-12-21 13:14:59,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 152. [2021-12-21 13:14:59,391 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 115 states have (on average 1.3565217391304347) internal successors, (156), 130 states have internal predecessors, (156), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2021-12-21 13:14:59,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 200 transitions. [2021-12-21 13:14:59,393 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 200 transitions. Word has length 30 [2021-12-21 13:14:59,393 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:59,393 INFO L470 AbstractCegarLoop]: Abstraction has 152 states and 200 transitions. [2021-12-21 13:14:59,393 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:59,393 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 200 transitions. [2021-12-21 13:14:59,395 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-12-21 13:14:59,396 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:59,396 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:59,396 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:14:59,396 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:59,397 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:59,397 INFO L85 PathProgramCache]: Analyzing trace with hash 1136396561, now seen corresponding path program 1 times [2021-12-21 13:14:59,397 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:59,398 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [323588063] [2021-12-21 13:14:59,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:59,399 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:59,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:14:59,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,479 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:59,480 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:59,480 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [323588063] [2021-12-21 13:14:59,480 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [323588063] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:59,480 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:59,480 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:14:59,480 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [928641367] [2021-12-21 13:14:59,481 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:59,481 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:14:59,481 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:59,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:14:59,482 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:14:59,482 INFO L87 Difference]: Start difference. First operand 152 states and 200 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:59,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:59,554 INFO L93 Difference]: Finished difference Result 438 states and 585 transitions. [2021-12-21 13:14:59,554 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-21 13:14:59,555 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2021-12-21 13:14:59,555 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:59,557 INFO L225 Difference]: With dead ends: 438 [2021-12-21 13:14:59,557 INFO L226 Difference]: Without dead ends: 294 [2021-12-21 13:14:59,557 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-21 13:14:59,558 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 74 mSDsluCounter, 404 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 518 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:59,558 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 518 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:59,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2021-12-21 13:14:59,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 288. [2021-12-21 13:14:59,576 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 288 states, 215 states have (on average 1.344186046511628) internal successors, (289), 244 states have internal predecessors, (289), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) [2021-12-21 13:14:59,577 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 288 states to 288 states and 379 transitions. [2021-12-21 13:14:59,577 INFO L78 Accepts]: Start accepts. Automaton has 288 states and 379 transitions. Word has length 34 [2021-12-21 13:14:59,577 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:59,577 INFO L470 AbstractCegarLoop]: Abstraction has 288 states and 379 transitions. [2021-12-21 13:14:59,578 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:59,578 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 379 transitions. [2021-12-21 13:14:59,579 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-21 13:14:59,579 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:59,579 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:59,579 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:14:59,579 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:59,580 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:59,580 INFO L85 PathProgramCache]: Analyzing trace with hash -373671891, now seen corresponding path program 1 times [2021-12-21 13:14:59,580 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:59,580 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1372838287] [2021-12-21 13:14:59,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:59,580 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:59,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:14:59,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-21 13:14:59,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,626 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:59,626 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:59,626 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1372838287] [2021-12-21 13:14:59,626 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1372838287] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:59,627 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:59,627 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:14:59,627 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [235960280] [2021-12-21 13:14:59,627 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:59,627 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:14:59,628 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:59,628 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:14:59,628 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:14:59,628 INFO L87 Difference]: Start difference. First operand 288 states and 379 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:14:59,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:59,823 INFO L93 Difference]: Finished difference Result 744 states and 996 transitions. [2021-12-21 13:14:59,823 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-21 13:14:59,823 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2021-12-21 13:14:59,824 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:59,826 INFO L225 Difference]: With dead ends: 744 [2021-12-21 13:14:59,826 INFO L226 Difference]: Without dead ends: 464 [2021-12-21 13:14:59,833 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:14:59,834 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 127 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 217 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 246 SdHoareTripleChecker+Invalid, 260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 217 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:59,834 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [132 Valid, 246 Invalid, 260 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 217 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:14:59,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 464 states. [2021-12-21 13:14:59,869 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 464 to 450. [2021-12-21 13:14:59,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 450 states, 337 states have (on average 1.2967359050445104) internal successors, (437), 370 states have internal predecessors, (437), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) [2021-12-21 13:14:59,874 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 450 states to 450 states and 577 transitions. [2021-12-21 13:14:59,874 INFO L78 Accepts]: Start accepts. Automaton has 450 states and 577 transitions. Word has length 38 [2021-12-21 13:14:59,875 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:59,876 INFO L470 AbstractCegarLoop]: Abstraction has 450 states and 577 transitions. [2021-12-21 13:14:59,876 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:14:59,876 INFO L276 IsEmpty]: Start isEmpty. Operand 450 states and 577 transitions. [2021-12-21 13:14:59,879 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-21 13:14:59,879 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:59,879 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:59,879 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:14:59,880 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:59,880 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:59,880 INFO L85 PathProgramCache]: Analyzing trace with hash 1261041571, now seen corresponding path program 1 times [2021-12-21 13:14:59,880 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:59,880 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1796442098] [2021-12-21 13:14:59,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:59,881 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:59,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:14:59,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:14:59,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:59,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-21 13:14:59,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:59,958 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:14:59,959 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:59,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1796442098] [2021-12-21 13:14:59,959 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1796442098] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:59,959 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:59,959 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:14:59,959 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [775906695] [2021-12-21 13:14:59,959 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:59,959 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:14:59,959 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:59,960 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:14:59,960 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:59,960 INFO L87 Difference]: Start difference. First operand 450 states and 577 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:15:00,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:00,175 INFO L93 Difference]: Finished difference Result 1008 states and 1325 transitions. [2021-12-21 13:15:00,175 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-21 13:15:00,175 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2021-12-21 13:15:00,176 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:00,178 INFO L225 Difference]: With dead ends: 1008 [2021-12-21 13:15:00,178 INFO L226 Difference]: Without dead ends: 566 [2021-12-21 13:15:00,179 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:15:00,180 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 140 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 272 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 258 SdHoareTripleChecker+Invalid, 324 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 272 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:00,180 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [141 Valid, 258 Invalid, 324 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 272 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:15:00,181 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 566 states. [2021-12-21 13:15:00,216 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 566 to 544. [2021-12-21 13:15:00,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 544 states, 411 states have (on average 1.2627737226277371) internal successors, (519), 444 states have internal predecessors, (519), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2021-12-21 13:15:00,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 544 states to 544 states and 687 transitions. [2021-12-21 13:15:00,221 INFO L78 Accepts]: Start accepts. Automaton has 544 states and 687 transitions. Word has length 56 [2021-12-21 13:15:00,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:00,221 INFO L470 AbstractCegarLoop]: Abstraction has 544 states and 687 transitions. [2021-12-21 13:15:00,222 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-21 13:15:00,222 INFO L276 IsEmpty]: Start isEmpty. Operand 544 states and 687 transitions. [2021-12-21 13:15:00,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-21 13:15:00,224 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:00,224 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:00,224 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:15:00,224 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:00,225 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:00,225 INFO L85 PathProgramCache]: Analyzing trace with hash -1110697691, now seen corresponding path program 1 times [2021-12-21 13:15:00,225 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:00,225 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1540807592] [2021-12-21 13:15:00,225 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:00,225 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:00,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:15:00,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:15:00,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:00,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-21 13:15:00,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,325 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:15:00,326 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:00,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1540807592] [2021-12-21 13:15:00,326 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1540807592] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:00,326 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:00,326 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:15:00,326 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [182016089] [2021-12-21 13:15:00,326 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:00,327 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:15:00,328 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:00,328 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:15:00,328 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:15:00,328 INFO L87 Difference]: Start difference. First operand 544 states and 687 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:15:00,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:00,689 INFO L93 Difference]: Finished difference Result 1134 states and 1469 transitions. [2021-12-21 13:15:00,689 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-21 13:15:00,689 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-12-21 13:15:00,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:00,692 INFO L225 Difference]: With dead ends: 1134 [2021-12-21 13:15:00,692 INFO L226 Difference]: Without dead ends: 598 [2021-12-21 13:15:00,693 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=90, Invalid=182, Unknown=0, NotChecked=0, Total=272 [2021-12-21 13:15:00,694 INFO L933 BasicCegarLoop]: 115 mSDtfsCounter, 367 mSDsluCounter, 174 mSDsCounter, 0 mSdLazyCounter, 363 mSolverCounterSat, 135 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 371 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 498 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 135 IncrementalHoareTripleChecker+Valid, 363 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:00,694 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [371 Valid, 289 Invalid, 498 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [135 Valid, 363 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-21 13:15:00,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 598 states. [2021-12-21 13:15:00,717 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 598 to 552. [2021-12-21 13:15:00,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 552 states, 419 states have (on average 1.2577565632458234) internal successors, (527), 452 states have internal predecessors, (527), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2021-12-21 13:15:00,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 552 states to 552 states and 695 transitions. [2021-12-21 13:15:00,721 INFO L78 Accepts]: Start accepts. Automaton has 552 states and 695 transitions. Word has length 56 [2021-12-21 13:15:00,721 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:00,721 INFO L470 AbstractCegarLoop]: Abstraction has 552 states and 695 transitions. [2021-12-21 13:15:00,721 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:15:00,721 INFO L276 IsEmpty]: Start isEmpty. Operand 552 states and 695 transitions. [2021-12-21 13:15:00,722 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-12-21 13:15:00,722 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:00,723 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:00,723 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:15:00,723 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:00,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:00,723 INFO L85 PathProgramCache]: Analyzing trace with hash 275505703, now seen corresponding path program 1 times [2021-12-21 13:15:00,724 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:00,724 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [890174688] [2021-12-21 13:15:00,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:00,724 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:00,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:15:00,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:15:00,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:00,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-21 13:15:00,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:00,780 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:15:00,780 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:00,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [890174688] [2021-12-21 13:15:00,780 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [890174688] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:00,781 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:00,781 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:15:00,781 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1049049919] [2021-12-21 13:15:00,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:00,782 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:15:00,782 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:00,782 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:15:00,782 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:15:00,782 INFO L87 Difference]: Start difference. First operand 552 states and 695 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:15:01,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:01,047 INFO L93 Difference]: Finished difference Result 1582 states and 2071 transitions. [2021-12-21 13:15:01,047 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-21 13:15:01,047 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2021-12-21 13:15:01,048 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:01,052 INFO L225 Difference]: With dead ends: 1582 [2021-12-21 13:15:01,052 INFO L226 Difference]: Without dead ends: 1038 [2021-12-21 13:15:01,053 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:15:01,054 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 328 mSDsluCounter, 140 mSDsCounter, 0 mSdLazyCounter, 256 mSolverCounterSat, 126 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 331 SdHoareTripleChecker+Valid, 279 SdHoareTripleChecker+Invalid, 382 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 126 IncrementalHoareTripleChecker+Valid, 256 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:01,054 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [331 Valid, 279 Invalid, 382 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [126 Valid, 256 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:15:01,054 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1038 states. [2021-12-21 13:15:01,088 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1038 to 1026. [2021-12-21 13:15:01,090 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1026 states, 773 states have (on average 1.2276843467011642) internal successors, (949), 824 states have internal predecessors, (949), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) [2021-12-21 13:15:01,093 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1026 states to 1026 states and 1295 transitions. [2021-12-21 13:15:01,093 INFO L78 Accepts]: Start accepts. Automaton has 1026 states and 1295 transitions. Word has length 56 [2021-12-21 13:15:01,093 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:01,093 INFO L470 AbstractCegarLoop]: Abstraction has 1026 states and 1295 transitions. [2021-12-21 13:15:01,093 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-21 13:15:01,093 INFO L276 IsEmpty]: Start isEmpty. Operand 1026 states and 1295 transitions. [2021-12-21 13:15:01,094 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-21 13:15:01,094 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:01,094 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:01,095 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-21 13:15:01,095 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:01,095 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:01,095 INFO L85 PathProgramCache]: Analyzing trace with hash 1790739521, now seen corresponding path program 1 times [2021-12-21 13:15:01,095 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:01,095 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1076705342] [2021-12-21 13:15:01,095 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:01,095 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:01,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:15:01,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:15:01,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-21 13:15:01,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:01,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-21 13:15:01,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,216 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-21 13:15:01,216 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:01,217 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1076705342] [2021-12-21 13:15:01,217 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1076705342] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:15:01,217 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1232132246] [2021-12-21 13:15:01,217 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:01,217 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:01,217 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:01,219 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:01,219 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:15:01,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,300 INFO L263 TraceCheckSpWp]: Trace formula consists of 384 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-21 13:15:01,305 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:01,581 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:15:01,581 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:15:01,581 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1232132246] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:01,581 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:15:01,581 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 19 [2021-12-21 13:15:01,581 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1887012838] [2021-12-21 13:15:01,581 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:01,582 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:15:01,582 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:01,582 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:15:01,582 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=46, Invalid=296, Unknown=0, NotChecked=0, Total=342 [2021-12-21 13:15:01,582 INFO L87 Difference]: Start difference. First operand 1026 states and 1295 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-21 13:15:01,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:01,694 INFO L93 Difference]: Finished difference Result 2000 states and 2536 transitions. [2021-12-21 13:15:01,695 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:15:01,695 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2021-12-21 13:15:01,695 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:01,699 INFO L225 Difference]: With dead ends: 2000 [2021-12-21 13:15:01,699 INFO L226 Difference]: Without dead ends: 982 [2021-12-21 13:15:01,701 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=52, Invalid=328, Unknown=0, NotChecked=0, Total=380 [2021-12-21 13:15:01,702 INFO L933 BasicCegarLoop]: 190 mSDtfsCounter, 80 mSDsluCounter, 363 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 553 SdHoareTripleChecker+Invalid, 122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:01,702 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [82 Valid, 553 Invalid, 122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:15:01,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 982 states. [2021-12-21 13:15:01,726 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 982 to 978. [2021-12-21 13:15:01,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 978 states, 735 states have (on average 1.2122448979591838) internal successors, (891), 784 states have internal predecessors, (891), 126 states have call successors, (126), 114 states have call predecessors, (126), 116 states have return successors, (188), 122 states have call predecessors, (188), 126 states have call successors, (188) [2021-12-21 13:15:01,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 978 states to 978 states and 1205 transitions. [2021-12-21 13:15:01,731 INFO L78 Accepts]: Start accepts. Automaton has 978 states and 1205 transitions. Word has length 60 [2021-12-21 13:15:01,731 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:01,731 INFO L470 AbstractCegarLoop]: Abstraction has 978 states and 1205 transitions. [2021-12-21 13:15:01,731 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-21 13:15:01,731 INFO L276 IsEmpty]: Start isEmpty. Operand 978 states and 1205 transitions. [2021-12-21 13:15:01,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2021-12-21 13:15:01,733 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:01,734 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:01,758 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 13:15:01,955 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:01,956 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:01,956 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:01,956 INFO L85 PathProgramCache]: Analyzing trace with hash 1108761287, now seen corresponding path program 1 times [2021-12-21 13:15:01,956 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:01,957 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [923619920] [2021-12-21 13:15:01,957 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:01,957 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:01,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:01,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:15:01,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:15:02,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:15:02,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:02,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:15:02,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-21 13:15:02,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2021-12-21 13:15:02,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,038 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-21 13:15:02,038 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:02,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [923619920] [2021-12-21 13:15:02,039 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [923619920] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:02,039 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:15:02,039 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-21 13:15:02,039 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [431355956] [2021-12-21 13:15:02,039 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:02,040 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-21 13:15:02,040 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:02,040 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-21 13:15:02,041 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-21 13:15:02,041 INFO L87 Difference]: Start difference. First operand 978 states and 1205 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-21 13:15:02,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:02,343 INFO L93 Difference]: Finished difference Result 1315 states and 1625 transitions. [2021-12-21 13:15:02,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-21 13:15:02,344 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 87 [2021-12-21 13:15:02,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:02,347 INFO L225 Difference]: With dead ends: 1315 [2021-12-21 13:15:02,347 INFO L226 Difference]: Without dead ends: 585 [2021-12-21 13:15:02,349 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=86, Invalid=220, Unknown=0, NotChecked=0, Total=306 [2021-12-21 13:15:02,349 INFO L933 BasicCegarLoop]: 129 mSDtfsCounter, 364 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 303 mSolverCounterSat, 136 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 373 SdHoareTripleChecker+Valid, 285 SdHoareTripleChecker+Invalid, 439 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 136 IncrementalHoareTripleChecker+Valid, 303 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:02,349 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [373 Valid, 285 Invalid, 439 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [136 Valid, 303 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:15:02,350 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 585 states. [2021-12-21 13:15:02,371 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 585 to 565. [2021-12-21 13:15:02,372 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 565 states, 425 states have (on average 1.1694117647058824) internal successors, (497), 455 states have internal predecessors, (497), 73 states have call successors, (73), 56 states have call predecessors, (73), 66 states have return successors, (120), 73 states have call predecessors, (120), 73 states have call successors, (120) [2021-12-21 13:15:02,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 565 states to 565 states and 690 transitions. [2021-12-21 13:15:02,374 INFO L78 Accepts]: Start accepts. Automaton has 565 states and 690 transitions. Word has length 87 [2021-12-21 13:15:02,375 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:02,375 INFO L470 AbstractCegarLoop]: Abstraction has 565 states and 690 transitions. [2021-12-21 13:15:02,375 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-21 13:15:02,375 INFO L276 IsEmpty]: Start isEmpty. Operand 565 states and 690 transitions. [2021-12-21 13:15:02,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-12-21 13:15:02,377 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:02,377 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:02,377 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-21 13:15:02,377 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:02,378 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:02,378 INFO L85 PathProgramCache]: Analyzing trace with hash -188705161, now seen corresponding path program 1 times [2021-12-21 13:15:02,378 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:02,378 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [134191755] [2021-12-21 13:15:02,378 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:02,379 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:02,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:15:02,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:02,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:15:02,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:02,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:15:02,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-21 13:15:02,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-21 13:15:02,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:02,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-21 13:15:02,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,456 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-12-21 13:15:02,456 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:02,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [134191755] [2021-12-21 13:15:02,456 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [134191755] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:15:02,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [721583489] [2021-12-21 13:15:02,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:02,457 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:02,457 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:02,458 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:02,459 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-21 13:15:02,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:02,531 INFO L263 TraceCheckSpWp]: Trace formula consists of 482 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-21 13:15:02,533 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:02,681 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2021-12-21 13:15:02,682 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:15:02,682 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [721583489] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:02,682 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:15:02,682 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2021-12-21 13:15:02,682 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [208537877] [2021-12-21 13:15:02,683 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:02,683 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:15:02,683 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:02,684 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:15:02,684 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2021-12-21 13:15:02,684 INFO L87 Difference]: Start difference. First operand 565 states and 690 transitions. Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-21 13:15:02,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:02,751 INFO L93 Difference]: Finished difference Result 1080 states and 1360 transitions. [2021-12-21 13:15:02,752 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:15:02,752 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2021-12-21 13:15:02,752 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:02,756 INFO L225 Difference]: With dead ends: 1080 [2021-12-21 13:15:02,757 INFO L226 Difference]: Without dead ends: 617 [2021-12-21 13:15:02,759 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 111 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=167, Unknown=0, NotChecked=0, Total=210 [2021-12-21 13:15:02,760 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 33 mSDsluCounter, 288 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 396 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:02,760 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [33 Valid, 396 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:02,761 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 617 states. [2021-12-21 13:15:02,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 617 to 577. [2021-12-21 13:15:02,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 577 states, 437 states have (on average 1.1647597254004576) internal successors, (509), 467 states have internal predecessors, (509), 73 states have call successors, (73), 56 states have call predecessors, (73), 66 states have return successors, (120), 73 states have call predecessors, (120), 73 states have call successors, (120) [2021-12-21 13:15:02,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 577 states to 577 states and 702 transitions. [2021-12-21 13:15:02,785 INFO L78 Accepts]: Start accepts. Automaton has 577 states and 702 transitions. Word has length 98 [2021-12-21 13:15:02,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:02,786 INFO L470 AbstractCegarLoop]: Abstraction has 577 states and 702 transitions. [2021-12-21 13:15:02,786 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-21 13:15:02,787 INFO L276 IsEmpty]: Start isEmpty. Operand 577 states and 702 transitions. [2021-12-21 13:15:02,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-12-21 13:15:02,788 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:02,788 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:02,816 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-21 13:15:03,003 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-21 13:15:03,004 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:03,004 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:03,004 INFO L85 PathProgramCache]: Analyzing trace with hash -54691655, now seen corresponding path program 1 times [2021-12-21 13:15:03,004 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:03,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [943103265] [2021-12-21 13:15:03,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:03,004 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:03,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:15:03,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:03,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:15:03,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:03,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:15:03,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-21 13:15:03,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-12-21 13:15:03,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:03,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-21 13:15:03,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,061 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-21 13:15:03,062 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:03,062 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [943103265] [2021-12-21 13:15:03,062 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [943103265] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:15:03,062 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [26097979] [2021-12-21 13:15:03,062 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:03,062 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:03,062 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:03,063 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:03,081 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-21 13:15:03,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,139 INFO L263 TraceCheckSpWp]: Trace formula consists of 481 conjuncts, 7 conjunts are in the unsatisfiable core [2021-12-21 13:15:03,141 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:03,267 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:15:03,267 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:15:03,268 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [26097979] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:15:03,268 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:15:03,268 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2021-12-21 13:15:03,268 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [182456767] [2021-12-21 13:15:03,268 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:15:03,269 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:15:03,269 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:03,269 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:15:03,269 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:15:03,269 INFO L87 Difference]: Start difference. First operand 577 states and 702 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-21 13:15:03,297 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:03,298 INFO L93 Difference]: Finished difference Result 906 states and 1139 transitions. [2021-12-21 13:15:03,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:15:03,298 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2021-12-21 13:15:03,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:03,301 INFO L225 Difference]: With dead ends: 906 [2021-12-21 13:15:03,302 INFO L226 Difference]: Without dead ends: 904 [2021-12-21 13:15:03,302 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:15:03,302 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 47 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:03,303 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [47 Valid, 193 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:15:03,303 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 904 states. [2021-12-21 13:15:03,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 904 to 703. [2021-12-21 13:15:03,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 703 states, 535 states have (on average 1.1775700934579438) internal successors, (630), 571 states have internal predecessors, (630), 89 states have call successors, (89), 67 states have call predecessors, (89), 78 states have return successors, (158), 86 states have call predecessors, (158), 89 states have call successors, (158) [2021-12-21 13:15:03,329 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 703 states to 703 states and 877 transitions. [2021-12-21 13:15:03,329 INFO L78 Accepts]: Start accepts. Automaton has 703 states and 877 transitions. Word has length 98 [2021-12-21 13:15:03,330 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:03,330 INFO L470 AbstractCegarLoop]: Abstraction has 703 states and 877 transitions. [2021-12-21 13:15:03,330 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-21 13:15:03,330 INFO L276 IsEmpty]: Start isEmpty. Operand 703 states and 877 transitions. [2021-12-21 13:15:03,332 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2021-12-21 13:15:03,332 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:15:03,333 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:03,353 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-21 13:15:03,545 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:03,546 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:15:03,546 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:15:03,546 INFO L85 PathProgramCache]: Analyzing trace with hash -1162464621, now seen corresponding path program 1 times [2021-12-21 13:15:03,546 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:15:03,546 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [394556262] [2021-12-21 13:15:03,546 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:03,547 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:15:03,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:15:03,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:03,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:15:03,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:15:03,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-21 13:15:03,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-21 13:15:03,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-12-21 13:15:03,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:15:03,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:03,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:15:03,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2021-12-21 13:15:03,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:15:03,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-21 13:15:03,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,676 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 56 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2021-12-21 13:15:03,676 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:15:03,677 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [394556262] [2021-12-21 13:15:03,677 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [394556262] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:15:03,677 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1166082365] [2021-12-21 13:15:03,677 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:15:03,677 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:03,677 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:15:03,678 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:15:03,723 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-12-21 13:15:03,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:15:03,800 INFO L263 TraceCheckSpWp]: Trace formula consists of 588 conjuncts, 11 conjunts are in the unsatisfiable core [2021-12-21 13:15:03,808 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:15:04,145 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 79 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:15:04,145 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:15:04,464 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 57 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2021-12-21 13:15:04,464 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1166082365] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:15:04,464 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:15:04,464 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 20 [2021-12-21 13:15:04,467 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1548008887] [2021-12-21 13:15:04,467 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:15:04,467 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-12-21 13:15:04,467 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:15:04,468 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-12-21 13:15:04,468 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=305, Unknown=0, NotChecked=0, Total=380 [2021-12-21 13:15:04,468 INFO L87 Difference]: Start difference. First operand 703 states and 877 transitions. Second operand has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2021-12-21 13:15:05,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:15:05,348 INFO L93 Difference]: Finished difference Result 1222 states and 1500 transitions. [2021-12-21 13:15:05,348 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2021-12-21 13:15:05,349 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 139 [2021-12-21 13:15:05,349 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:15:05,349 INFO L225 Difference]: With dead ends: 1222 [2021-12-21 13:15:05,349 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:15:05,352 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 337 GetRequests, 295 SyntacticMatches, 5 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 302 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=327, Invalid=1155, Unknown=0, NotChecked=0, Total=1482 [2021-12-21 13:15:05,353 INFO L933 BasicCegarLoop]: 160 mSDtfsCounter, 546 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 1087 mSolverCounterSat, 252 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 547 SdHoareTripleChecker+Valid, 505 SdHoareTripleChecker+Invalid, 1339 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 252 IncrementalHoareTripleChecker+Valid, 1087 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-21 13:15:05,353 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [547 Valid, 505 Invalid, 1339 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [252 Valid, 1087 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-21 13:15:05,353 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:15:05,354 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:15:05,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:15:05,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:15:05,354 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 139 [2021-12-21 13:15:05,354 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:15:05,354 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:15:05,354 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2021-12-21 13:15:05,354 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:15:05,354 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:15:05,356 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:15:05,376 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2021-12-21 13:15:05,571 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:15:05,573 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:15:10,488 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 183 190) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse4) (or .cse0 .cse3 .cse2 .cse5))) [2021-12-21 13:15:10,488 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 183 190) no Hoare annotation was computed. [2021-12-21 13:15:10,488 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 183 190) no Hoare annotation was computed. [2021-12-21 13:15:10,488 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 98 104) no Hoare annotation was computed. [2021-12-21 13:15:10,488 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 98 104) the Hoare annotation is: true [2021-12-21 13:15:10,488 INFO L858 garLoopResultBuilder]: For program point L942-1(lines 938 949) no Hoare annotation was computed. [2021-12-21 13:15:10,488 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 938 949) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse6 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse4) (or .cse5 .cse0 .cse1 .cse2 .cse4) (or .cse5 .cse0 .cse2 .cse6) (or .cse0 .cse2 .cse3 .cse6))) [2021-12-21 13:15:10,488 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 938 949) no Hoare annotation was computed. [2021-12-21 13:15:10,488 INFO L861 garLoopResultBuilder]: At program point L417(line 417) the Hoare annotation is: true [2021-12-21 13:15:10,488 INFO L858 garLoopResultBuilder]: For program point L417-1(line 417) no Hoare annotation was computed. [2021-12-21 13:15:10,489 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 411 440) no Hoare annotation was computed. [2021-12-21 13:15:10,489 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 411 440) the Hoare annotation is: true [2021-12-21 13:15:10,489 INFO L861 garLoopResultBuilder]: At program point L436(lines 411 440) the Hoare annotation is: true [2021-12-21 13:15:10,489 INFO L858 garLoopResultBuilder]: For program point L432(line 432) no Hoare annotation was computed. [2021-12-21 13:15:10,489 INFO L858 garLoopResultBuilder]: For program point L425(lines 425 429) no Hoare annotation was computed. [2021-12-21 13:15:10,489 INFO L861 garLoopResultBuilder]: At program point L425-1(lines 425 429) the Hoare annotation is: true [2021-12-21 13:15:10,489 INFO L858 garLoopResultBuilder]: For program point L422(line 422) no Hoare annotation was computed. [2021-12-21 13:15:10,489 INFO L861 garLoopResultBuilder]: At program point L421-2(lines 421 435) the Hoare annotation is: true [2021-12-21 13:15:10,490 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 950 958) the Hoare annotation is: true [2021-12-21 13:15:10,490 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 950 958) no Hoare annotation was computed. [2021-12-21 13:15:10,490 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 950 958) no Hoare annotation was computed. [2021-12-21 13:15:10,490 INFO L858 garLoopResultBuilder]: For program point L386-1(line 386) no Hoare annotation was computed. [2021-12-21 13:15:10,490 INFO L854 garLoopResultBuilder]: At program point L151(line 151) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (not (= 0 ~systemActive~0)))) (and (or (and .cse0 .cse1 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 (and .cse0 .cse7 .cse8) .cse3) (or .cse5 .cse6 .cse2 .cse9 (and .cse1 .cse7 .cse8)) (or .cse6 .cse2 .cse9 (and .cse0 .cse1) .cse4) (or .cse5 .cse3 .cse10) (or .cse5 .cse9 .cse10))) [2021-12-21 13:15:10,490 INFO L854 garLoopResultBuilder]: At program point L151-1(lines 132 156) the Hoare annotation is: (let ((.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse16 (= 1 ~systemActive~0))) (let ((.cse8 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse11 (<= 2 ~waterLevel~0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not .cse16)) (.cse12 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse10 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse13 (let ((.cse17 (= ~waterLevel~0 0))) (or (and (not .cse17) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0)) (and .cse17 (= |timeShift_isLowWaterLevel_~tmp~4#1| 1))))) (.cse3 (not .cse15)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse14 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6)) (or .cse0 .cse7 .cse8) (or .cse0 .cse3 .cse8) (or (and .cse9 .cse4 .cse10) .cse2 .cse7 (and .cse11 .cse10) (and .cse12 .cse4 .cse10 .cse13) .cse14) (or .cse0 .cse1 .cse2 (and .cse9 .cse5 .cse6) .cse7 (and .cse11 .cse5)) (or .cse1 .cse2 (and .cse12 .cse4 .cse15 .cse16 .cse10 .cse13) .cse3 (and .cse9 .cse4 .cse15 .cse16) .cse14)))) [2021-12-21 13:15:10,490 INFO L858 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2021-12-21 13:15:10,491 INFO L858 garLoopResultBuilder]: For program point L275(lines 275 279) no Hoare annotation was computed. [2021-12-21 13:15:10,491 INFO L854 garLoopResultBuilder]: At program point L1010(lines 1005 1013) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= 0 ~systemActive~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse7 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 (and .cse5 .cse6 .cse7) .cse8) (or .cse0 .cse4 .cse9) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse3 .cse9) (or .cse1 .cse2 .cse3 (and .cse5 .cse6 (= ~methAndRunningLastTime~0 0) .cse7) .cse8))) [2021-12-21 13:15:10,491 INFO L858 garLoopResultBuilder]: For program point L275-2(lines 275 279) no Hoare annotation was computed. [2021-12-21 13:15:10,491 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 74 97) no Hoare annotation was computed. [2021-12-21 13:15:10,491 INFO L858 garLoopResultBuilder]: For program point L78-1(lines 77 96) no Hoare annotation was computed. [2021-12-21 13:15:10,491 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 148) no Hoare annotation was computed. [2021-12-21 13:15:10,491 INFO L858 garLoopResultBuilder]: For program point L136(lines 136 153) no Hoare annotation was computed. [2021-12-21 13:15:10,491 INFO L858 garLoopResultBuilder]: For program point L392(lines 392 402) no Hoare annotation was computed. [2021-12-21 13:15:10,491 INFO L858 garLoopResultBuilder]: For program point L388(lines 388 405) no Hoare annotation was computed. [2021-12-21 13:15:10,492 INFO L854 garLoopResultBuilder]: At program point L388-1(lines 380 408) the Hoare annotation is: (let ((.cse16 (= 1 ~systemActive~0))) (let ((.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse7 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (let ((.cse17 (= ~waterLevel~0 0))) (or (and (not .cse17) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0)) (and .cse17 (= |timeShift_isLowWaterLevel_~tmp~4#1| 1))))) (.cse14 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse11 (not .cse16)) (.cse12 (not (= ~methaneLevelCritical~0 0))) (.cse13 (<= 2 ~waterLevel~0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4) (or (and .cse5 .cse1 .cse6 .cse7 .cse8 .cse9) (and .cse10 .cse1 .cse6 .cse7 .cse9) .cse11 .cse12 (and .cse6 .cse13 .cse7 .cse9) .cse14) (or .cse15 .cse11 .cse3 (and .cse10 .cse1 .cse16) (and .cse5 .cse1 .cse6 .cse16 .cse7 .cse8) .cse14) (or .cse0 .cse15 .cse11 .cse3 (and .cse1 .cse6 .cse16 .cse2)) (or .cse0 .cse12 (and .cse1 .cse2 .cse9) .cse4) (or (and .cse1 .cse6 .cse2 .cse9) .cse0 .cse15 .cse11 .cse12 (and .cse13 .cse2))))) [2021-12-21 13:15:10,492 INFO L854 garLoopResultBuilder]: At program point L281(lines 266 284) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~1#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse4) (or .cse1 .cse2 .cse6 .cse3 .cse7) (or .cse2 .cse6 .cse4 .cse7) (or .cse0 .cse3 .cse5))) [2021-12-21 13:15:10,492 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2021-12-21 13:15:10,492 INFO L854 garLoopResultBuilder]: At program point L207(lines 202 210) the Hoare annotation is: (let ((.cse10 (<= 1 ~methaneLevelCritical~0)) (.cse11 (= 1 ~systemActive~0))) (let ((.cse6 (not (= 0 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse13 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (not .cse11)) (.cse1 (not .cse10))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5) .cse6) (or .cse0 .cse7 .cse6) (or .cse0 .cse8 .cse9 .cse7) (or .cse8 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 .cse10 .cse3 .cse11 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse9 .cse1 (and .cse12 .cse2 .cse10 .cse3 .cse11) .cse13) (or .cse9 .cse7 .cse13) (or .cse0 (and .cse12 .cse3 .cse4 .cse5) .cse8 .cse9 .cse1)))) [2021-12-21 13:15:10,492 INFO L858 garLoopResultBuilder]: For program point L393(lines 393 399) no Hoare annotation was computed. [2021-12-21 13:15:10,492 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse3 .cse5) (or .cse2 .cse4 .cse6) (or .cse1 .cse2 .cse3 .cse6))) [2021-12-21 13:15:10,492 INFO L858 garLoopResultBuilder]: For program point L918(lines 918 922) no Hoare annotation was computed. [2021-12-21 13:15:10,492 INFO L854 garLoopResultBuilder]: At program point L918-2(lines 914 925) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse3 .cse5) (or (and .cse6 (= ~methAndRunningLastTime~0 0) .cse7) .cse1 .cse2 .cse3 .cse8) (or .cse2 .cse4 (and .cse6 .cse7) .cse8))) [2021-12-21 13:15:10,492 INFO L854 garLoopResultBuilder]: At program point L146(line 146) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse3 .cse5) (or .cse2 .cse4 .cse6) (or .cse1 .cse2 .cse3 .cse6))) [2021-12-21 13:15:10,493 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 74 97) the Hoare annotation is: (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse10)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (= 0 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse7 (and (= ~pumpRunning~0 0) .cse9 .cse10))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8) (or .cse1 .cse3 .cse6 .cse4) (or .cse5 .cse0 .cse1 .cse2 .cse7) (or .cse5 .cse2 .cse7 .cse8) (or .cse5 .cse0 .cse1 .cse6 .cse7)))) [2021-12-21 13:15:10,493 INFO L854 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= 0 ~systemActive~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (let ((.cse8 (= ~waterLevel~0 0))) (or (and (not .cse8) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0)) (and .cse8 (= |timeShift_isLowWaterLevel_~tmp~4#1| 1)))))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse6) (or .cse0 .cse3 .cse7) (or .cse2 .cse6 .cse4 .cse5))) [2021-12-21 13:15:10,493 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 74 97) no Hoare annotation was computed. [2021-12-21 13:15:10,493 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2021-12-21 13:15:10,493 INFO L854 garLoopResultBuilder]: At program point L386(line 386) the Hoare annotation is: (let ((.cse16 (<= 1 ~methaneLevelCritical~0)) (.cse17 (= 1 ~systemActive~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse2 (and .cse8 .cse14 .cse15)) (.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse10 (<= 2 ~waterLevel~0)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not .cse17)) (.cse11 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse9 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse12 (let ((.cse18 (= ~waterLevel~0 0))) (or (and (not .cse18) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0)) (and .cse18 (= |timeShift_isLowWaterLevel_~tmp~4#1| 1))))) (.cse6 (not .cse16)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse6 .cse2) (or .cse0 .cse6 .cse2 .cse3) (or (and .cse7 .cse8 .cse9) .cse5 .cse1 (and .cse10 .cse9) (and .cse11 .cse8 .cse9 .cse12) .cse13) (or .cse0 .cse4 .cse5 (and .cse7 .cse14 .cse15) .cse1 (and .cse10 .cse14)) (or .cse4 .cse5 (and .cse11 .cse8 .cse16 .cse17 .cse9 .cse12) .cse6 (and .cse7 .cse8 .cse16 .cse17) .cse13)))) [2021-12-21 13:15:10,493 INFO L858 garLoopResultBuilder]: For program point L316(lines 316 320) no Hoare annotation was computed. [2021-12-21 13:15:10,493 INFO L854 garLoopResultBuilder]: At program point L469(lines 465 471) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:10,493 INFO L854 garLoopResultBuilder]: At program point L362(lines 313 363) the Hoare annotation is: false [2021-12-21 13:15:10,493 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:15:10,494 INFO L858 garLoopResultBuilder]: For program point L350(lines 350 356) no Hoare annotation was computed. [2021-12-21 13:15:10,494 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:15:10,494 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:15:10,494 INFO L854 garLoopResultBuilder]: At program point L540(lines 535 543) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:10,494 INFO L854 garLoopResultBuilder]: At program point L350-2(lines 344 357) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 0 ~systemActive~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse4 .cse6) (and .cse5 .cse0 .cse1 .cse3 .cse4) (and .cse5 .cse0 .cse7 .cse3 .cse4) (and .cse5 .cse7 .cse4 .cse6) (and .cse7 .cse2 .cse3 .cse4))) [2021-12-21 13:15:10,494 INFO L854 garLoopResultBuilder]: At program point L532(lines 528 534) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:10,494 INFO L858 garLoopResultBuilder]: For program point L334(lines 334 340) no Hoare annotation was computed. [2021-12-21 13:15:10,494 INFO L858 garLoopResultBuilder]: For program point L334-1(lines 334 340) no Hoare annotation was computed. [2021-12-21 13:15:10,495 INFO L854 garLoopResultBuilder]: At program point L297(lines 285 299) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2021-12-21 13:15:10,495 INFO L854 garLoopResultBuilder]: At program point L359(lines 314 361) the Hoare annotation is: (let ((.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse4 .cse5 .cse3 .cse6) (and .cse4 .cse0 .cse5 .cse2 .cse3) (and .cse4 .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse3 .cse6))) [2021-12-21 13:15:10,495 INFO L854 garLoopResultBuilder]: At program point L326(line 326) the Hoare annotation is: (let ((.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse4 .cse5 .cse3 .cse6) (and .cse4 .cse0 .cse5 .cse2 .cse3) (and .cse4 .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse3 .cse6))) [2021-12-21 13:15:10,496 INFO L858 garLoopResultBuilder]: For program point L289(lines 289 295) no Hoare annotation was computed. [2021-12-21 13:15:10,496 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:15:10,496 INFO L858 garLoopResultBuilder]: For program point L289-1(lines 289 295) no Hoare annotation was computed. [2021-12-21 13:15:10,496 INFO L858 garLoopResultBuilder]: For program point L496(lines 496 503) no Hoare annotation was computed. [2021-12-21 13:15:10,497 INFO L858 garLoopResultBuilder]: For program point L496-2(lines 496 503) no Hoare annotation was computed. [2021-12-21 13:15:10,497 INFO L854 garLoopResultBuilder]: At program point L525(lines 521 527) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:10,497 INFO L861 garLoopResultBuilder]: At program point L480(lines 472 482) the Hoare annotation is: true [2021-12-21 13:15:10,497 INFO L858 garLoopResultBuilder]: For program point L315(lines 314 361) no Hoare annotation was computed. [2021-12-21 13:15:10,497 INFO L854 garLoopResultBuilder]: At program point L377(lines 372 379) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:15:10,497 INFO L861 garLoopResultBuilder]: At program point L505(lines 486 508) the Hoare annotation is: true [2021-12-21 13:15:10,497 INFO L858 garLoopResultBuilder]: For program point L344(lines 344 357) no Hoare annotation was computed. [2021-12-21 13:15:10,497 INFO L854 garLoopResultBuilder]: At program point L336(line 336) the Hoare annotation is: (let ((.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (= 0 ~systemActive~0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse4 .cse5 .cse3 .cse6) (and .cse4 .cse0 .cse5 .cse2 .cse3) (and .cse4 .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse3 .cse6))) [2021-12-21 13:15:10,498 INFO L861 garLoopResultBuilder]: At program point L365(lines 304 369) the Hoare annotation is: true [2021-12-21 13:15:10,498 INFO L858 garLoopResultBuilder]: For program point L324(lines 324 330) no Hoare annotation was computed. [2021-12-21 13:15:10,498 INFO L858 garLoopResultBuilder]: For program point L324-1(lines 324 330) no Hoare annotation was computed. [2021-12-21 13:15:10,498 INFO L854 garLoopResultBuilder]: At program point L291(line 291) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2) (and .cse3 .cse4 .cse2 .cse5) (and .cse3 .cse1 .cse2) (and .cse0 .cse4 .cse2 .cse5))) [2021-12-21 13:15:10,498 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 106 130) the Hoare annotation is: (let ((.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~waterLevel~0 0))) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse1 .cse7) (or .cse5 .cse6 .cse1 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse7))) [2021-12-21 13:15:10,498 INFO L858 garLoopResultBuilder]: For program point L256(lines 256 260) no Hoare annotation was computed. [2021-12-21 13:15:10,498 INFO L858 garLoopResultBuilder]: For program point L256-2(lines 256 260) no Hoare annotation was computed. [2021-12-21 13:15:10,498 INFO L854 garLoopResultBuilder]: At program point L120(line 120) the Hoare annotation is: (let ((.cse8 (= ~methaneLevelCritical~0 0)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (= ~pumpRunning~0 0)) (.cse12 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) (.cse9 (= 1 ~systemActive~0))) (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (and .cse10 .cse11 .cse12 .cse9)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (and .cse10 .cse11 .cse8 .cse12 .cse9)) (.cse2 (not .cse9)) (.cse5 (not (= ~waterLevel~0 0))) (.cse3 (not .cse8))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6 .cse7) (or .cse1 .cse4 .cse2 .cse6 .cse7) (or .cse0 .cse2 .cse5 .cse3)))) [2021-12-21 13:15:10,499 INFO L858 garLoopResultBuilder]: For program point L114(lines 114 122) no Hoare annotation was computed. [2021-12-21 13:15:10,499 INFO L858 garLoopResultBuilder]: For program point L110(lines 110 127) no Hoare annotation was computed. [2021-12-21 13:15:10,499 INFO L854 garLoopResultBuilder]: At program point L1000(lines 991 1004) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse11 (= ~methaneLevelCritical~0 0)) (.cse12 (= 1 ~systemActive~0))) (let ((.cse1 (not (= ~waterLevel~0 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse12)) (.cse2 (not .cse11)) (.cse8 (and .cse5 (<= 2 ~waterLevel~0))) (.cse3 (and .cse10 .cse5 .cse11 .cse6 .cse12))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 (and .cse5 .cse6) .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse7 (and .cse10 .cse5) .cse9) (or .cse4 .cse0 .cse2 .cse8 .cse3)))) [2021-12-21 13:15:10,499 INFO L854 garLoopResultBuilder]: At program point L162(lines 157 164) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~waterLevel~0 0))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 (<= 2 ~waterLevel~0) .cse5) (or .cse4 .cse0 .cse2 .cse3) (or .cse0 .cse1 .cse5))) [2021-12-21 13:15:10,499 INFO L854 garLoopResultBuilder]: At program point L125(line 125) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~waterLevel~0 0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse3 .cse4) (or .cse5 .cse1 .cse6) (or .cse0 .cse1 .cse2 .cse6))) [2021-12-21 13:15:10,499 INFO L858 garLoopResultBuilder]: For program point L125-1(lines 106 130) no Hoare annotation was computed. [2021-12-21 13:15:10,499 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 106 130) no Hoare annotation was computed. [2021-12-21 13:15:10,499 INFO L858 garLoopResultBuilder]: For program point L173(lines 173 179) no Hoare annotation was computed. [2021-12-21 13:15:10,499 INFO L854 garLoopResultBuilder]: At program point L173-2(lines 166 182) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~waterLevel~0 0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (and (= ~pumpRunning~0 0) .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~2#1|)) .cse4) (or .cse1 .cse5 .cse2 .cse4) (or .cse0 .cse1 .cse3 .cse6) (or .cse1 .cse5 .cse6))) [2021-12-21 13:15:10,499 INFO L854 garLoopResultBuilder]: At program point L262(lines 247 265) the Hoare annotation is: (let ((.cse11 (= ~methaneLevelCritical~0 0)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse12 (= 1 ~systemActive~0)) (.cse13 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (.cse14 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) (.cse15 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0)))) (let ((.cse1 (not (= ~waterLevel~0 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (and .cse10 .cse9 .cse12 .cse13 .cse14 .cse15)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse12)) (.cse5 (not .cse11)) (.cse6 (and .cse10 .cse9 .cse11 .cse12 .cse13 .cse14 .cse15)) (.cse8 (and .cse9 (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6) (or .cse7 .cse0 .cse2 .cse8 .cse3 .cse4) (or .cse7 .cse0 .cse5 .cse6 .cse8)))) [2021-12-21 13:15:10,500 INFO L854 garLoopResultBuilder]: At program point L198(lines 191 201) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~waterLevel~0 0))) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse2 (and .cse5 .cse6 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|)) .cse3) (or .cse4 .cse0 .cse7 (and .cse5 .cse6)) (or .cse0 .cse1 .cse7))) [2021-12-21 13:15:10,500 INFO L854 garLoopResultBuilder]: At program point L196(line 196) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~waterLevel~0 0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse2 .cse5 .cse3) (or .cse4 .cse0 .cse6 .cse5) (or .cse0 .cse1 .cse6))) [2021-12-21 13:15:10,500 INFO L858 garLoopResultBuilder]: For program point L995(lines 995 1001) no Hoare annotation was computed. [2021-12-21 13:15:10,500 INFO L858 garLoopResultBuilder]: For program point L196-1(line 196) no Hoare annotation was computed. [2021-12-21 13:15:10,500 INFO L858 garLoopResultBuilder]: For program point L930-1(lines 926 937) no Hoare annotation was computed. [2021-12-21 13:15:10,500 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 926 937) no Hoare annotation was computed. [2021-12-21 13:15:10,500 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 926 937) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= 0 ~systemActive~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse5) (or .cse1 .cse6 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse6 .cse3 .cse5) (or .cse0 .cse1 .cse6 .cse3 .cse4))) [2021-12-21 13:15:10,502 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:15:10,504 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:15:10,554 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:15:10 BoogieIcfgContainer [2021-12-21 13:15:10,554 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:15:10,554 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:15:10,555 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:15:10,555 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:15:10,555 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:14:58" (3/4) ... [2021-12-21 13:15:10,557 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:15:10,561 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-21 13:15:10,562 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:15:10,562 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:15:10,562 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:15:10,562 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-21 13:15:10,562 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:15:10,562 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:15:10,562 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:15:10,567 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2021-12-21 13:15:10,568 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:15:10,568 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:15:10,568 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:15:10,569 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:15:10,569 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:15:10,569 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:15:10,584 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) [2021-12-21 13:15:10,585 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || (((\result == 0 && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 == systemActive)) || !(2 <= \old(waterLevel))) [2021-12-21 13:15:10,586 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1))) && tmp == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && tmp == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methAndRunningLastTime == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && tmp == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) || (((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && tmp == 0)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) [2021-12-21 13:15:10,586 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) [2021-12-21 13:15:10,586 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || ((((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == 0) && 1 == systemActive) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) [2021-12-21 13:15:10,586 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) [2021-12-21 13:15:10,587 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) [2021-12-21 13:15:10,587 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(\result == 0)) && 1 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && ((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(\result == 0)) && 1 == systemActive)) [2021-12-21 13:15:10,587 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) [2021-12-21 13:15:10,587 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) [2021-12-21 13:15:10,587 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2021-12-21 13:15:10,588 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) && (((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) [2021-12-21 13:15:10,608 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:15:10,608 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:15:10,609 INFO L158 Benchmark]: Toolchain (without parser) took 12815.60ms. Allocated memory was 92.3MB in the beginning and 201.3MB in the end (delta: 109.1MB). Free memory was 60.2MB in the beginning and 76.8MB in the end (delta: -16.5MB). Peak memory consumption was 92.3MB. Max. memory is 16.1GB. [2021-12-21 13:15:10,609 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 92.3MB. Free memory was 48.8MB in the beginning and 48.8MB in the end (delta: 39.3kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:15:10,609 INFO L158 Benchmark]: CACSL2BoogieTranslator took 350.59ms. Allocated memory is still 92.3MB. Free memory was 60.1MB in the beginning and 61.4MB in the end (delta: -1.3MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-21 13:15:10,609 INFO L158 Benchmark]: Boogie Procedure Inliner took 33.56ms. Allocated memory is still 92.3MB. Free memory was 61.4MB in the beginning and 58.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:10,610 INFO L158 Benchmark]: Boogie Preprocessor took 34.42ms. Allocated memory is still 92.3MB. Free memory was 58.9MB in the beginning and 57.3MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:10,610 INFO L158 Benchmark]: RCFGBuilder took 424.18ms. Allocated memory is still 92.3MB. Free memory was 57.3MB in the beginning and 40.1MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-21 13:15:10,610 INFO L158 Benchmark]: TraceAbstraction took 11911.21ms. Allocated memory was 92.3MB in the beginning and 201.3MB in the end (delta: 109.1MB). Free memory was 39.7MB in the beginning and 84.1MB in the end (delta: -44.4MB). Peak memory consumption was 95.1MB. Max. memory is 16.1GB. [2021-12-21 13:15:10,610 INFO L158 Benchmark]: Witness Printer took 53.95ms. Allocated memory is still 201.3MB. Free memory was 84.1MB in the beginning and 76.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-21 13:15:10,611 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 92.3MB. Free memory was 48.8MB in the beginning and 48.8MB in the end (delta: 39.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 350.59ms. Allocated memory is still 92.3MB. Free memory was 60.1MB in the beginning and 61.4MB in the end (delta: -1.3MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 33.56ms. Allocated memory is still 92.3MB. Free memory was 61.4MB in the beginning and 58.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.42ms. Allocated memory is still 92.3MB. Free memory was 58.9MB in the beginning and 57.3MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 424.18ms. Allocated memory is still 92.3MB. Free memory was 57.3MB in the beginning and 40.1MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 11911.21ms. Allocated memory was 92.3MB in the beginning and 201.3MB in the end (delta: 109.1MB). Free memory was 39.7MB in the beginning and 84.1MB in the end (delta: -44.4MB). Peak memory consumption was 95.1MB. Max. memory is 16.1GB. * Witness Printer took 53.95ms. Allocated memory is still 201.3MB. Free memory was 84.1MB in the beginning and 76.8MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 100 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.8s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.9s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2239 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2207 mSDsluCounter, 4064 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2451 mSDsCounter, 760 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2688 IncrementalHoareTripleChecker+Invalid, 3448 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 760 mSolverCounterUnsat, 1613 mSDtfsCounter, 2688 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 799 GetRequests, 652 SyntacticMatches, 6 SemanticMatches, 141 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 446 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1026occurred in iteration=8, InterpolantAutomatonStates: 113, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 13 MinimizatonAttempts, 368 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 2706 PreInvPairs, 3025 NumberOfFragments, 3389 HoareAnnotationTreeSize, 2706 FomulaSimplifications, 3024 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 46 FomulaSimplificationsInter, 20106 FormulaSimplificationTreeSizeReductionInter, 4.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 1198 NumberOfCodeBlocks, 1198 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1319 ConstructedInterpolants, 0 QuantifiedInterpolants, 2606 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1935 ConjunctsInSsa, 31 ConjunctsInUnsatCore, 18 InterpolantComputations, 12 PerfectInterpolantSequences, 400/453 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || (((\result == 0 && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1))) && tmp == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && tmp == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methAndRunningLastTime == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && tmp == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) || (((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && tmp == 0)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 472]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 304]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(\result == 0)) && 1 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && ((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && !(\result == 0)) && 1 == systemActive)) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) - InvariantResult [Line: 247]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) && (((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 157]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 191]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 528]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 535]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 313]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 314]: Loop Invariant Derived loop invariant: (((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 372]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 166]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(waterLevel == 0)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((!(1 == systemActive) || !(waterLevel == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || ((((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == 0) && 1 == systemActive) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == 0) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) RESULT: Ultimate proved your program to be correct! [2021-12-21 13:15:10,653 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE