./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash b18268074b12ff6db81668668ee2d33af663d931f7be534d8799200934e1992a --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:17:18,505 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:17:18,507 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:17:18,548 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:17:18,549 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:17:18,549 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:17:18,550 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:17:18,551 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:17:18,552 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:17:18,553 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:17:18,553 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:17:18,554 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:17:18,554 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:17:18,555 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:17:18,556 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:17:18,556 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:17:18,557 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:17:18,558 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:17:18,559 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:17:18,560 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:17:18,561 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:17:18,561 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:17:18,562 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:17:18,563 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:17:18,564 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:17:18,564 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:17:18,565 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:17:18,565 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:17:18,566 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:17:18,566 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:17:18,566 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:17:18,567 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:17:18,567 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:17:18,568 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:17:18,569 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:17:18,569 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:17:18,569 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:17:18,570 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:17:18,570 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:17:18,570 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:17:18,571 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:17:18,571 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:17:18,584 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:17:18,584 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:17:18,584 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:17:18,584 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:17:18,585 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:17:18,585 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:17:18,585 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:17:18,585 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:17:18,585 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:17:18,586 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:17:18,586 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:17:18,586 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:17:18,586 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:17:18,586 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:17:18,586 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:17:18,586 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:17:18,587 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:17:18,587 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:17:18,587 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:17:18,587 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:17:18,587 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:17:18,587 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:17:18,587 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:17:18,588 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:17:18,588 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:17:18,588 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:17:18,588 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:17:18,588 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:17:18,588 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:17:18,588 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:17:18,589 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:17:18,589 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:17:18,589 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:17:18,589 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:17:18,589 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b18268074b12ff6db81668668ee2d33af663d931f7be534d8799200934e1992a [2021-12-21 13:17:18,755 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:17:18,785 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:17:18,787 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:17:18,788 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:17:18,788 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:17:18,789 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c [2021-12-21 13:17:18,837 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/32d350522/97817eb787b34be48ef591216d588717/FLAG2bd41cf20 [2021-12-21 13:17:19,258 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:17:19,259 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c [2021-12-21 13:17:19,272 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/32d350522/97817eb787b34be48ef591216d588717/FLAG2bd41cf20 [2021-12-21 13:17:19,284 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/32d350522/97817eb787b34be48ef591216d588717 [2021-12-21 13:17:19,286 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:17:19,288 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:17:19,290 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:17:19,290 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:17:19,292 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:17:19,293 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:17:19" (1/1) ... [2021-12-21 13:17:19,293 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@63808fbc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:19, skipping insertion in model container [2021-12-21 13:17:19,294 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:17:19" (1/1) ... [2021-12-21 13:17:19,298 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:17:19,338 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:17:19,515 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c[2897,2910] [2021-12-21 13:17:19,612 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:17:19,622 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:17:19,645 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product63.cil.c[2897,2910] [2021-12-21 13:17:19,689 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:17:19,703 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:17:19,703 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:19 WrapperNode [2021-12-21 13:17:19,703 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:17:19,704 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:17:19,705 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:17:19,705 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:17:19,710 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:19" (1/1) ... [2021-12-21 13:17:19,731 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:19" (1/1) ... [2021-12-21 13:17:19,763 INFO L137 Inliner]: procedures = 60, calls = 165, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 299 [2021-12-21 13:17:19,763 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:17:19,764 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:17:19,764 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:17:19,764 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:17:19,770 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:19" (1/1) ... [2021-12-21 13:17:19,770 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:19" (1/1) ... [2021-12-21 13:17:19,778 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:19" (1/1) ... [2021-12-21 13:17:19,779 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:19" (1/1) ... [2021-12-21 13:17:19,783 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:19" (1/1) ... [2021-12-21 13:17:19,798 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:19" (1/1) ... [2021-12-21 13:17:19,799 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:19" (1/1) ... [2021-12-21 13:17:19,801 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:17:19,804 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:17:19,805 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:17:19,805 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:17:19,806 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:19" (1/1) ... [2021-12-21 13:17:19,811 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:17:19,821 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:19,832 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:17:19,834 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:17:19,863 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:17:19,864 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:17:19,864 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:17:19,864 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:17:19,864 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:17:19,864 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:17:19,864 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:17:19,865 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:17:19,865 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:17:19,865 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:17:19,865 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:17:19,865 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:17:19,865 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:17:19,865 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2021-12-21 13:17:19,865 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2021-12-21 13:17:19,866 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-21 13:17:19,866 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-21 13:17:19,866 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-21 13:17:19,866 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-21 13:17:19,867 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:17:19,867 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:17:19,867 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:17:19,867 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:17:19,867 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:17:19,923 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:17:19,925 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:17:20,254 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:17:20,260 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:17:20,263 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:17:20,266 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:17:20 BoogieIcfgContainer [2021-12-21 13:17:20,266 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:17:20,267 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:17:20,267 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:17:20,270 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:17:20,271 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:17:19" (1/3) ... [2021-12-21 13:17:20,271 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7db0f5c4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:17:20, skipping insertion in model container [2021-12-21 13:17:20,272 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:17:19" (2/3) ... [2021-12-21 13:17:20,272 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7db0f5c4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:17:20, skipping insertion in model container [2021-12-21 13:17:20,272 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:17:20" (3/3) ... [2021-12-21 13:17:20,273 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product63.cil.c [2021-12-21 13:17:20,276 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:17:20,276 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:17:20,310 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:17:20,316 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:17:20,316 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:17:20,330 INFO L276 IsEmpty]: Start isEmpty. Operand has 117 states, 86 states have (on average 1.3604651162790697) internal successors, (117), 97 states have internal predecessors, (117), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2021-12-21 13:17:20,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-21 13:17:20,339 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:20,340 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:20,340 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:20,344 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:20,344 INFO L85 PathProgramCache]: Analyzing trace with hash 2028778160, now seen corresponding path program 1 times [2021-12-21 13:17:20,349 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:20,349 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1448937430] [2021-12-21 13:17:20,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:20,350 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:20,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:20,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-21 13:17:20,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:20,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:17:20,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:20,568 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:20,569 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:20,569 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1448937430] [2021-12-21 13:17:20,570 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1448937430] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:20,570 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:20,570 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:17:20,571 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [731037328] [2021-12-21 13:17:20,572 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:20,575 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:17:20,575 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:20,594 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:17:20,595 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:17:20,598 INFO L87 Difference]: Start difference. First operand has 117 states, 86 states have (on average 1.3604651162790697) internal successors, (117), 97 states have internal predecessors, (117), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:17:20,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:20,621 INFO L93 Difference]: Finished difference Result 225 states and 304 transitions. [2021-12-21 13:17:20,623 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:17:20,624 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2021-12-21 13:17:20,624 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:20,632 INFO L225 Difference]: With dead ends: 225 [2021-12-21 13:17:20,632 INFO L226 Difference]: Without dead ends: 108 [2021-12-21 13:17:20,636 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:17:20,639 INFO L933 BasicCegarLoop]: 149 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 149 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:20,641 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:17:20,651 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2021-12-21 13:17:20,667 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 108. [2021-12-21 13:17:20,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 79 states have (on average 1.3037974683544304) internal successors, (103), 89 states have internal predecessors, (103), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-12-21 13:17:20,670 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 140 transitions. [2021-12-21 13:17:20,671 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 140 transitions. Word has length 32 [2021-12-21 13:17:20,671 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:20,671 INFO L470 AbstractCegarLoop]: Abstraction has 108 states and 140 transitions. [2021-12-21 13:17:20,671 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-21 13:17:20,672 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 140 transitions. [2021-12-21 13:17:20,673 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2021-12-21 13:17:20,673 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:20,674 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:20,674 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:17:20,674 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:20,674 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:20,675 INFO L85 PathProgramCache]: Analyzing trace with hash -257998862, now seen corresponding path program 1 times [2021-12-21 13:17:20,675 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:20,675 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1271534384] [2021-12-21 13:17:20,675 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:20,675 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:20,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:20,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:17:20,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:20,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-21 13:17:20,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:20,728 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:20,729 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:20,729 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1271534384] [2021-12-21 13:17:20,729 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1271534384] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:20,729 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:20,729 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:17:20,729 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1610438039] [2021-12-21 13:17:20,730 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:20,730 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:17:20,731 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:20,731 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:17:20,731 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:17:20,731 INFO L87 Difference]: Start difference. First operand 108 states and 140 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:17:20,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:20,756 INFO L93 Difference]: Finished difference Result 307 states and 406 transitions. [2021-12-21 13:17:20,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:17:20,756 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2021-12-21 13:17:20,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:20,758 INFO L225 Difference]: With dead ends: 307 [2021-12-21 13:17:20,758 INFO L226 Difference]: Without dead ends: 207 [2021-12-21 13:17:20,759 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:17:20,760 INFO L933 BasicCegarLoop]: 170 mSDtfsCounter, 115 mSDsluCounter, 129 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:20,761 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [115 Valid, 299 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:17:20,761 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 207 states. [2021-12-21 13:17:20,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 207 to 204. [2021-12-21 13:17:20,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 147 states have (on average 1.3197278911564625) internal successors, (194), 166 states have internal predecessors, (194), 38 states have call successors, (38), 20 states have call predecessors, (38), 18 states have return successors, (36), 25 states have call predecessors, (36), 36 states have call successors, (36) [2021-12-21 13:17:20,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 268 transitions. [2021-12-21 13:17:20,778 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 268 transitions. Word has length 37 [2021-12-21 13:17:20,778 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:20,778 INFO L470 AbstractCegarLoop]: Abstraction has 204 states and 268 transitions. [2021-12-21 13:17:20,778 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:17:20,779 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 268 transitions. [2021-12-21 13:17:20,780 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2021-12-21 13:17:20,780 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:20,781 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:20,781 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:17:20,781 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:20,781 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:20,781 INFO L85 PathProgramCache]: Analyzing trace with hash 702056680, now seen corresponding path program 1 times [2021-12-21 13:17:20,782 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:20,782 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [464530849] [2021-12-21 13:17:20,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:20,782 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:20,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:20,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 13:17:20,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:20,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-21 13:17:20,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:20,839 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-21 13:17:20,840 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:20,840 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [464530849] [2021-12-21 13:17:20,840 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [464530849] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:20,840 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:20,840 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:17:20,841 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1490751006] [2021-12-21 13:17:20,841 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:20,841 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:17:20,841 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:20,842 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:17:20,842 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:17:20,842 INFO L87 Difference]: Start difference. First operand 204 states and 268 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:17:20,954 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:20,954 INFO L93 Difference]: Finished difference Result 538 states and 751 transitions. [2021-12-21 13:17:20,955 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-21 13:17:20,955 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2021-12-21 13:17:20,955 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:20,958 INFO L225 Difference]: With dead ends: 538 [2021-12-21 13:17:20,958 INFO L226 Difference]: Without dead ends: 342 [2021-12-21 13:17:20,959 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-21 13:17:20,960 INFO L933 BasicCegarLoop]: 159 mSDtfsCounter, 102 mSDsluCounter, 522 mSDsCounter, 0 mSdLazyCounter, 91 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 681 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 91 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:20,961 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [104 Valid, 681 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 91 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:17:20,961 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 342 states. [2021-12-21 13:17:20,989 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 342 to 329. [2021-12-21 13:17:20,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 329 states, 240 states have (on average 1.2666666666666666) internal successors, (304), 259 states have internal predecessors, (304), 54 states have call successors, (54), 38 states have call predecessors, (54), 34 states have return successors, (70), 45 states have call predecessors, (70), 50 states have call successors, (70) [2021-12-21 13:17:20,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 329 states to 329 states and 428 transitions. [2021-12-21 13:17:20,992 INFO L78 Accepts]: Start accepts. Automaton has 329 states and 428 transitions. Word has length 41 [2021-12-21 13:17:20,993 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:20,993 INFO L470 AbstractCegarLoop]: Abstraction has 329 states and 428 transitions. [2021-12-21 13:17:20,993 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2021-12-21 13:17:20,993 INFO L276 IsEmpty]: Start isEmpty. Operand 329 states and 428 transitions. [2021-12-21 13:17:20,995 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-21 13:17:20,995 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:20,995 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:20,995 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:17:20,996 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:20,996 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:20,996 INFO L85 PathProgramCache]: Analyzing trace with hash 1444776659, now seen corresponding path program 1 times [2021-12-21 13:17:20,996 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:20,996 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1552912888] [2021-12-21 13:17:20,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:20,997 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:21,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:17:21,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:17:21,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:21,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:21,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-21 13:17:21,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,120 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:21,121 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:21,121 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1552912888] [2021-12-21 13:17:21,122 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1552912888] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:21,122 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:21,122 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:17:21,123 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [589757516] [2021-12-21 13:17:21,123 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:21,123 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:17:21,124 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:21,124 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:17:21,128 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:17:21,128 INFO L87 Difference]: Start difference. First operand 329 states and 428 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:17:21,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:21,307 INFO L93 Difference]: Finished difference Result 746 states and 1031 transitions. [2021-12-21 13:17:21,307 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:17:21,307 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 64 [2021-12-21 13:17:21,308 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:21,311 INFO L225 Difference]: With dead ends: 746 [2021-12-21 13:17:21,312 INFO L226 Difference]: Without dead ends: 425 [2021-12-21 13:17:21,313 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:17:21,321 INFO L933 BasicCegarLoop]: 128 mSDtfsCounter, 86 mSDsluCounter, 395 mSDsCounter, 0 mSdLazyCounter, 154 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 523 SdHoareTripleChecker+Invalid, 188 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 154 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:21,321 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [91 Valid, 523 Invalid, 188 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 154 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:17:21,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 425 states. [2021-12-21 13:17:21,348 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 425 to 389. [2021-12-21 13:17:21,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 389 states, 286 states have (on average 1.2517482517482517) internal successors, (358), 305 states have internal predecessors, (358), 58 states have call successors, (58), 38 states have call predecessors, (58), 44 states have return successors, (92), 57 states have call predecessors, (92), 54 states have call successors, (92) [2021-12-21 13:17:21,352 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 389 states to 389 states and 508 transitions. [2021-12-21 13:17:21,352 INFO L78 Accepts]: Start accepts. Automaton has 389 states and 508 transitions. Word has length 64 [2021-12-21 13:17:21,353 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:21,354 INFO L470 AbstractCegarLoop]: Abstraction has 389 states and 508 transitions. [2021-12-21 13:17:21,354 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:17:21,354 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 508 transitions. [2021-12-21 13:17:21,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-21 13:17:21,359 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:21,360 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:21,360 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:17:21,360 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:21,361 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:21,361 INFO L85 PathProgramCache]: Analyzing trace with hash 968830382, now seen corresponding path program 1 times [2021-12-21 13:17:21,361 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:21,361 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [809807296] [2021-12-21 13:17:21,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:21,366 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:21,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:17:21,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-21 13:17:21,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:21,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:21,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2021-12-21 13:17:21,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,440 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:21,441 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:21,441 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [809807296] [2021-12-21 13:17:21,441 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [809807296] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:21,441 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:21,441 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-21 13:17:21,441 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1681086090] [2021-12-21 13:17:21,441 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:21,442 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-12-21 13:17:21,442 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:21,442 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-21 13:17:21,442 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-21 13:17:21,443 INFO L87 Difference]: Start difference. First operand 389 states and 508 transitions. Second operand has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:17:21,547 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:21,547 INFO L93 Difference]: Finished difference Result 657 states and 826 transitions. [2021-12-21 13:17:21,548 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-21 13:17:21,548 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2021-12-21 13:17:21,548 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:21,549 INFO L225 Difference]: With dead ends: 657 [2021-12-21 13:17:21,550 INFO L226 Difference]: Without dead ends: 355 [2021-12-21 13:17:21,550 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-21 13:17:21,551 INFO L933 BasicCegarLoop]: 115 mSDtfsCounter, 83 mSDsluCounter, 123 mSDsCounter, 0 mSdLazyCounter, 66 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 94 SdHoareTripleChecker+Valid, 238 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 66 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:21,551 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [94 Valid, 238 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 66 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:17:21,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 355 states. [2021-12-21 13:17:21,584 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 355 to 353. [2021-12-21 13:17:21,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 353 states, 262 states have (on average 1.2595419847328244) internal successors, (330), 281 states have internal predecessors, (330), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2021-12-21 13:17:21,587 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 353 states to 353 states and 444 transitions. [2021-12-21 13:17:21,587 INFO L78 Accepts]: Start accepts. Automaton has 353 states and 444 transitions. Word has length 60 [2021-12-21 13:17:21,587 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:21,587 INFO L470 AbstractCegarLoop]: Abstraction has 353 states and 444 transitions. [2021-12-21 13:17:21,588 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (7), 3 states have call predecessors, (7), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:17:21,588 INFO L276 IsEmpty]: Start isEmpty. Operand 353 states and 444 transitions. [2021-12-21 13:17:21,589 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-21 13:17:21,589 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:21,589 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:21,589 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:17:21,589 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:21,590 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:21,590 INFO L85 PathProgramCache]: Analyzing trace with hash -1463987243, now seen corresponding path program 1 times [2021-12-21 13:17:21,590 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:21,590 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [732030062] [2021-12-21 13:17:21,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:21,590 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:21,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:17:21,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:17:21,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:21,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:21,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-21 13:17:21,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,659 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:21,659 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:21,659 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [732030062] [2021-12-21 13:17:21,659 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [732030062] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:21,659 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:21,660 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:17:21,660 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [711562693] [2021-12-21 13:17:21,660 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:21,660 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:17:21,660 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:21,661 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:17:21,661 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:17:21,661 INFO L87 Difference]: Start difference. First operand 353 states and 444 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:17:21,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:21,756 INFO L93 Difference]: Finished difference Result 716 states and 927 transitions. [2021-12-21 13:17:21,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-21 13:17:21,756 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 64 [2021-12-21 13:17:21,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:21,758 INFO L225 Difference]: With dead ends: 716 [2021-12-21 13:17:21,758 INFO L226 Difference]: Without dead ends: 371 [2021-12-21 13:17:21,759 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:17:21,759 INFO L933 BasicCegarLoop]: 115 mSDtfsCounter, 83 mSDsluCounter, 245 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 360 SdHoareTripleChecker+Invalid, 131 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:21,760 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [89 Valid, 360 Invalid, 131 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:17:21,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 371 states. [2021-12-21 13:17:21,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 371 to 357. [2021-12-21 13:17:21,769 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 357 states, 266 states have (on average 1.255639097744361) internal successors, (334), 285 states have internal predecessors, (334), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2021-12-21 13:17:21,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 357 states to 357 states and 448 transitions. [2021-12-21 13:17:21,771 INFO L78 Accepts]: Start accepts. Automaton has 357 states and 448 transitions. Word has length 64 [2021-12-21 13:17:21,771 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:21,771 INFO L470 AbstractCegarLoop]: Abstraction has 357 states and 448 transitions. [2021-12-21 13:17:21,771 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:17:21,772 INFO L276 IsEmpty]: Start isEmpty. Operand 357 states and 448 transitions. [2021-12-21 13:17:21,772 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-21 13:17:21,772 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:21,772 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:21,773 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:17:21,773 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:21,773 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:21,773 INFO L85 PathProgramCache]: Analyzing trace with hash -762387369, now seen corresponding path program 1 times [2021-12-21 13:17:21,773 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:21,774 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [799113980] [2021-12-21 13:17:21,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:21,774 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:21,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:17:21,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:17:21,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:21,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:21,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2021-12-21 13:17:21,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:21,840 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:21,840 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:21,840 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [799113980] [2021-12-21 13:17:21,840 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [799113980] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:21,840 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:21,841 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:17:21,841 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [970607785] [2021-12-21 13:17:21,841 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:21,841 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:17:21,841 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:21,842 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:17:21,842 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:17:21,842 INFO L87 Difference]: Start difference. First operand 357 states and 448 transitions. Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-21 13:17:22,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:22,035 INFO L93 Difference]: Finished difference Result 998 states and 1301 transitions. [2021-12-21 13:17:22,036 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:17:22,036 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2021-12-21 13:17:22,036 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:22,038 INFO L225 Difference]: With dead ends: 998 [2021-12-21 13:17:22,038 INFO L226 Difference]: Without dead ends: 649 [2021-12-21 13:17:22,039 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 2 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:17:22,040 INFO L933 BasicCegarLoop]: 171 mSDtfsCounter, 256 mSDsluCounter, 217 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 264 SdHoareTripleChecker+Valid, 388 SdHoareTripleChecker+Invalid, 266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:22,040 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [264 Valid, 388 Invalid, 266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:17:22,041 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 649 states. [2021-12-21 13:17:22,057 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 649 to 642. [2021-12-21 13:17:22,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 642 states, 477 states have (on average 1.2243186582809225) internal successors, (584), 505 states have internal predecessors, (584), 87 states have call successors, (87), 71 states have call predecessors, (87), 77 states have return successors, (139), 88 states have call predecessors, (139), 87 states have call successors, (139) [2021-12-21 13:17:22,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 642 states to 642 states and 810 transitions. [2021-12-21 13:17:22,074 INFO L78 Accepts]: Start accepts. Automaton has 642 states and 810 transitions. Word has length 64 [2021-12-21 13:17:22,075 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:22,075 INFO L470 AbstractCegarLoop]: Abstraction has 642 states and 810 transitions. [2021-12-21 13:17:22,075 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.2) internal successors, (51), 4 states have internal predecessors, (51), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-21 13:17:22,075 INFO L276 IsEmpty]: Start isEmpty. Operand 642 states and 810 transitions. [2021-12-21 13:17:22,076 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2021-12-21 13:17:22,091 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:22,091 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:22,092 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:17:22,092 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:22,092 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:22,092 INFO L85 PathProgramCache]: Analyzing trace with hash -480731343, now seen corresponding path program 1 times [2021-12-21 13:17:22,092 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:22,092 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [539563702] [2021-12-21 13:17:22,093 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:22,093 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:22,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:22,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:22,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:22,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2021-12-21 13:17:22,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:22,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2021-12-21 13:17:22,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:22,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:22,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:22,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:22,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:22,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2021-12-21 13:17:22,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:22,233 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:17:22,234 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:22,234 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [539563702] [2021-12-21 13:17:22,234 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [539563702] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:22,234 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:22,234 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2021-12-21 13:17:22,234 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1295128047] [2021-12-21 13:17:22,234 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:22,235 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-12-21 13:17:22,235 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:22,235 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-12-21 13:17:22,235 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2021-12-21 13:17:22,236 INFO L87 Difference]: Start difference. First operand 642 states and 810 transitions. Second operand has 10 states, 10 states have (on average 5.3) internal successors, (53), 8 states have internal predecessors, (53), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 5 states have call successors, (6) [2021-12-21 13:17:23,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:23,002 INFO L93 Difference]: Finished difference Result 2031 states and 2688 transitions. [2021-12-21 13:17:23,002 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2021-12-21 13:17:23,003 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.3) internal successors, (53), 8 states have internal predecessors, (53), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 5 states have call successors, (6) Word has length 68 [2021-12-21 13:17:23,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:23,008 INFO L225 Difference]: With dead ends: 2031 [2021-12-21 13:17:23,008 INFO L226 Difference]: Without dead ends: 1510 [2021-12-21 13:17:23,009 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 15 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 297 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2021-12-21 13:17:23,010 INFO L933 BasicCegarLoop]: 189 mSDtfsCounter, 687 mSDsluCounter, 722 mSDsCounter, 0 mSdLazyCounter, 1060 mSolverCounterSat, 264 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 698 SdHoareTripleChecker+Valid, 911 SdHoareTripleChecker+Invalid, 1324 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 264 IncrementalHoareTripleChecker+Valid, 1060 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:23,010 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [698 Valid, 911 Invalid, 1324 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [264 Valid, 1060 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-21 13:17:23,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1510 states. [2021-12-21 13:17:23,051 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1510 to 1245. [2021-12-21 13:17:23,053 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1245 states, 924 states have (on average 1.222943722943723) internal successors, (1130), 985 states have internal predecessors, (1130), 170 states have call successors, (170), 126 states have call predecessors, (170), 150 states have return successors, (270), 172 states have call predecessors, (270), 170 states have call successors, (270) [2021-12-21 13:17:23,056 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1245 states to 1245 states and 1570 transitions. [2021-12-21 13:17:23,057 INFO L78 Accepts]: Start accepts. Automaton has 1245 states and 1570 transitions. Word has length 68 [2021-12-21 13:17:23,057 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:23,057 INFO L470 AbstractCegarLoop]: Abstraction has 1245 states and 1570 transitions. [2021-12-21 13:17:23,057 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.3) internal successors, (53), 8 states have internal predecessors, (53), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 5 states have call successors, (6) [2021-12-21 13:17:23,058 INFO L276 IsEmpty]: Start isEmpty. Operand 1245 states and 1570 transitions. [2021-12-21 13:17:23,059 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-12-21 13:17:23,059 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:23,059 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:23,059 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-21 13:17:23,059 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:23,060 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:23,060 INFO L85 PathProgramCache]: Analyzing trace with hash -608570004, now seen corresponding path program 1 times [2021-12-21 13:17:23,060 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:23,060 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [647313823] [2021-12-21 13:17:23,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:23,060 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:23,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:23,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:17:23,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:23,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:23,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:23,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:23,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2021-12-21 13:17:23,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-21 13:17:23,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,123 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-21 13:17:23,123 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:23,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [647313823] [2021-12-21 13:17:23,124 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [647313823] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:17:23,124 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:17:23,124 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:17:23,124 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2078830168] [2021-12-21 13:17:23,124 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:17:23,124 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:17:23,125 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:23,125 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:17:23,125 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:17:23,125 INFO L87 Difference]: Start difference. First operand 1245 states and 1570 transitions. Second operand has 7 states, 7 states have (on average 11.0) internal successors, (77), 4 states have internal predecessors, (77), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-12-21 13:17:23,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:23,375 INFO L93 Difference]: Finished difference Result 1481 states and 1859 transitions. [2021-12-21 13:17:23,375 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2021-12-21 13:17:23,376 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 11.0) internal successors, (77), 4 states have internal predecessors, (77), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 98 [2021-12-21 13:17:23,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:23,378 INFO L225 Difference]: With dead ends: 1481 [2021-12-21 13:17:23,378 INFO L226 Difference]: Without dead ends: 637 [2021-12-21 13:17:23,380 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2021-12-21 13:17:23,380 INFO L933 BasicCegarLoop]: 160 mSDtfsCounter, 326 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 254 mSolverCounterSat, 121 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 335 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 375 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 121 IncrementalHoareTripleChecker+Valid, 254 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:23,380 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [335 Valid, 394 Invalid, 375 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [121 Valid, 254 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:17:23,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 637 states. [2021-12-21 13:17:23,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 637 to 611. [2021-12-21 13:17:23,404 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 611 states, 454 states have (on average 1.1916299559471366) internal successors, (541), 482 states have internal predecessors, (541), 82 states have call successors, (82), 62 states have call predecessors, (82), 74 states have return successors, (132), 84 states have call predecessors, (132), 82 states have call successors, (132) [2021-12-21 13:17:23,406 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 611 states to 611 states and 755 transitions. [2021-12-21 13:17:23,407 INFO L78 Accepts]: Start accepts. Automaton has 611 states and 755 transitions. Word has length 98 [2021-12-21 13:17:23,407 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:23,407 INFO L470 AbstractCegarLoop]: Abstraction has 611 states and 755 transitions. [2021-12-21 13:17:23,407 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 11.0) internal successors, (77), 4 states have internal predecessors, (77), 4 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2021-12-21 13:17:23,407 INFO L276 IsEmpty]: Start isEmpty. Operand 611 states and 755 transitions. [2021-12-21 13:17:23,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2021-12-21 13:17:23,408 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:23,408 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:23,408 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-21 13:17:23,409 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:23,409 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:23,409 INFO L85 PathProgramCache]: Analyzing trace with hash 115908773, now seen corresponding path program 1 times [2021-12-21 13:17:23,409 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:23,409 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [819610809] [2021-12-21 13:17:23,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:23,410 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:23,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:23,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:17:23,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:23,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:23,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:23,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:23,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2021-12-21 13:17:23,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 84 [2021-12-21 13:17:23,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 91 [2021-12-21 13:17:23,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-21 13:17:23,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:23,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-21 13:17:23,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,528 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 20 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-21 13:17:23,528 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:23,528 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [819610809] [2021-12-21 13:17:23,528 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [819610809] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:17:23,528 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1207742859] [2021-12-21 13:17:23,529 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:23,529 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:23,529 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:23,530 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:17:23,564 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:17:23,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:23,623 INFO L263 TraceCheckSpWp]: Trace formula consists of 535 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-21 13:17:23,628 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:17:23,865 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 30 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:17:23,865 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:17:24,086 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 18 proven. 10 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2021-12-21 13:17:24,087 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1207742859] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:17:24,087 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:17:24,087 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2021-12-21 13:17:24,087 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462012954] [2021-12-21 13:17:24,087 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:17:24,088 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-12-21 13:17:24,088 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:24,088 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-12-21 13:17:24,088 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2021-12-21 13:17:24,089 INFO L87 Difference]: Start difference. First operand 611 states and 755 transitions. Second operand has 15 states, 15 states have (on average 10.333333333333334) internal successors, (155), 10 states have internal predecessors, (155), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2021-12-21 13:17:24,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:24,959 INFO L93 Difference]: Finished difference Result 1294 states and 1634 transitions. [2021-12-21 13:17:24,959 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2021-12-21 13:17:24,959 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 10.333333333333334) internal successors, (155), 10 states have internal predecessors, (155), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) Word has length 121 [2021-12-21 13:17:24,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:24,962 INFO L225 Difference]: With dead ends: 1294 [2021-12-21 13:17:24,962 INFO L226 Difference]: Without dead ends: 744 [2021-12-21 13:17:24,965 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 318 GetRequests, 275 SyntacticMatches, 1 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 447 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=441, Invalid=1451, Unknown=0, NotChecked=0, Total=1892 [2021-12-21 13:17:24,966 INFO L933 BasicCegarLoop]: 234 mSDtfsCounter, 486 mSDsluCounter, 1047 mSDsCounter, 0 mSdLazyCounter, 1214 mSolverCounterSat, 263 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 489 SdHoareTripleChecker+Valid, 1281 SdHoareTripleChecker+Invalid, 1477 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 263 IncrementalHoareTripleChecker+Valid, 1214 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:24,966 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [489 Valid, 1281 Invalid, 1477 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [263 Valid, 1214 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-12-21 13:17:24,967 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 744 states. [2021-12-21 13:17:25,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 744 to 672. [2021-12-21 13:17:25,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 672 states, 494 states have (on average 1.1720647773279351) internal successors, (579), 530 states have internal predecessors, (579), 92 states have call successors, (92), 76 states have call predecessors, (92), 85 states have return successors, (124), 89 states have call predecessors, (124), 92 states have call successors, (124) [2021-12-21 13:17:25,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 672 states to 672 states and 795 transitions. [2021-12-21 13:17:25,039 INFO L78 Accepts]: Start accepts. Automaton has 672 states and 795 transitions. Word has length 121 [2021-12-21 13:17:25,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:25,040 INFO L470 AbstractCegarLoop]: Abstraction has 672 states and 795 transitions. [2021-12-21 13:17:25,040 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 10.333333333333334) internal successors, (155), 10 states have internal predecessors, (155), 6 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2021-12-21 13:17:25,040 INFO L276 IsEmpty]: Start isEmpty. Operand 672 states and 795 transitions. [2021-12-21 13:17:25,042 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 212 [2021-12-21 13:17:25,042 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:25,043 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:25,078 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 13:17:25,243 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-21 13:17:25,244 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:25,244 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:25,244 INFO L85 PathProgramCache]: Analyzing trace with hash 950034461, now seen corresponding path program 1 times [2021-12-21 13:17:25,244 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:25,244 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [844821575] [2021-12-21 13:17:25,244 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:25,244 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:25,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:25,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:17:25,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:25,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:25,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:25,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:25,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-21 13:17:25,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:25,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:25,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:17:25,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-21 13:17:25,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:25,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 124 [2021-12-21 13:17:25,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:25,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:25,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:17:25,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 165 [2021-12-21 13:17:25,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 174 [2021-12-21 13:17:25,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:25,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:25,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 203 [2021-12-21 13:17:25,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,509 INFO L134 CoverageAnalysis]: Checked inductivity of 225 backedges. 91 proven. 45 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2021-12-21 13:17:25,509 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:25,509 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [844821575] [2021-12-21 13:17:25,509 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [844821575] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:17:25,509 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [323838800] [2021-12-21 13:17:25,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:25,510 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:25,510 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:25,511 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:17:25,512 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-21 13:17:25,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:25,624 INFO L263 TraceCheckSpWp]: Trace formula consists of 769 conjuncts, 13 conjunts are in the unsatisfiable core [2021-12-21 13:17:25,633 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:17:26,003 INFO L134 CoverageAnalysis]: Checked inductivity of 225 backedges. 163 proven. 4 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2021-12-21 13:17:26,004 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:17:26,547 INFO L134 CoverageAnalysis]: Checked inductivity of 225 backedges. 77 proven. 39 refuted. 0 times theorem prover too weak. 109 trivial. 0 not checked. [2021-12-21 13:17:26,548 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [323838800] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:17:26,548 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:17:26,548 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 10, 11] total 30 [2021-12-21 13:17:26,548 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [45849859] [2021-12-21 13:17:26,548 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:17:26,548 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2021-12-21 13:17:26,548 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:26,549 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2021-12-21 13:17:26,549 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=126, Invalid=744, Unknown=0, NotChecked=0, Total=870 [2021-12-21 13:17:26,550 INFO L87 Difference]: Start difference. First operand 672 states and 795 transitions. Second operand has 30 states, 30 states have (on average 7.8) internal successors, (234), 23 states have internal predecessors, (234), 10 states have call successors, (40), 8 states have call predecessors, (40), 12 states have return successors, (44), 12 states have call predecessors, (44), 10 states have call successors, (44) [2021-12-21 13:17:28,600 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:28,601 INFO L93 Difference]: Finished difference Result 1906 states and 2356 transitions. [2021-12-21 13:17:28,601 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 67 states. [2021-12-21 13:17:28,601 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 7.8) internal successors, (234), 23 states have internal predecessors, (234), 10 states have call successors, (40), 8 states have call predecessors, (40), 12 states have return successors, (44), 12 states have call predecessors, (44), 10 states have call successors, (44) Word has length 211 [2021-12-21 13:17:28,602 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:28,606 INFO L225 Difference]: With dead ends: 1906 [2021-12-21 13:17:28,606 INFO L226 Difference]: Without dead ends: 1242 [2021-12-21 13:17:28,610 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 566 GetRequests, 466 SyntacticMatches, 7 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2357 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=1403, Invalid=7527, Unknown=0, NotChecked=0, Total=8930 [2021-12-21 13:17:28,610 INFO L933 BasicCegarLoop]: 197 mSDtfsCounter, 1757 mSDsluCounter, 1314 mSDsCounter, 0 mSdLazyCounter, 3004 mSolverCounterSat, 879 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1757 SdHoareTripleChecker+Valid, 1511 SdHoareTripleChecker+Invalid, 3883 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 879 IncrementalHoareTripleChecker+Valid, 3004 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:28,611 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1757 Valid, 1511 Invalid, 3883 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [879 Valid, 3004 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-12-21 13:17:28,612 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1242 states. [2021-12-21 13:17:28,669 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1242 to 1145. [2021-12-21 13:17:28,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1145 states, 855 states have (on average 1.1076023391812866) internal successors, (947), 895 states have internal predecessors, (947), 156 states have call successors, (156), 134 states have call predecessors, (156), 133 states have return successors, (187), 143 states have call predecessors, (187), 156 states have call successors, (187) [2021-12-21 13:17:28,673 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1145 states to 1145 states and 1290 transitions. [2021-12-21 13:17:28,673 INFO L78 Accepts]: Start accepts. Automaton has 1145 states and 1290 transitions. Word has length 211 [2021-12-21 13:17:28,674 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:28,674 INFO L470 AbstractCegarLoop]: Abstraction has 1145 states and 1290 transitions. [2021-12-21 13:17:28,674 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 7.8) internal successors, (234), 23 states have internal predecessors, (234), 10 states have call successors, (40), 8 states have call predecessors, (40), 12 states have return successors, (44), 12 states have call predecessors, (44), 10 states have call successors, (44) [2021-12-21 13:17:28,674 INFO L276 IsEmpty]: Start isEmpty. Operand 1145 states and 1290 transitions. [2021-12-21 13:17:28,677 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 236 [2021-12-21 13:17:28,677 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:28,677 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:28,695 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-21 13:17:28,890 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-21 13:17:28,890 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:28,891 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:28,891 INFO L85 PathProgramCache]: Analyzing trace with hash -1994411691, now seen corresponding path program 1 times [2021-12-21 13:17:28,891 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:28,891 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1506670519] [2021-12-21 13:17:28,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:28,891 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:28,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:28,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:28,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:28,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:17:28,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:28,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:28,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:28,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:28,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:28,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:28,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:28,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:28,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:28,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-21 13:17:28,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:28,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:28,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:28,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:28,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:28,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:17:28,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:28,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-21 13:17:28,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:28,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:29,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-21 13:17:29,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2021-12-21 13:17:29,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-12-21 13:17:29,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:29,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:29,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:17:29,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:17:29,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-12-21 13:17:29,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-12-21 13:17:29,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-12-21 13:17:29,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 198 [2021-12-21 13:17:29,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:29,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:29,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-12-21 13:17:29,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,055 INFO L134 CoverageAnalysis]: Checked inductivity of 275 backedges. 86 proven. 59 refuted. 0 times theorem prover too weak. 130 trivial. 0 not checked. [2021-12-21 13:17:29,055 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:29,055 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1506670519] [2021-12-21 13:17:29,055 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1506670519] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:17:29,055 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1360436951] [2021-12-21 13:17:29,055 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:29,055 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:29,055 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:29,056 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:17:29,096 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-21 13:17:29,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:29,180 INFO L263 TraceCheckSpWp]: Trace formula consists of 827 conjuncts, 12 conjunts are in the unsatisfiable core [2021-12-21 13:17:29,183 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:17:29,473 INFO L134 CoverageAnalysis]: Checked inductivity of 275 backedges. 206 proven. 11 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2021-12-21 13:17:29,473 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:17:30,059 INFO L134 CoverageAnalysis]: Checked inductivity of 275 backedges. 101 proven. 62 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2021-12-21 13:17:30,060 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1360436951] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:17:30,060 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:17:30,060 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2021-12-21 13:17:30,060 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1866037891] [2021-12-21 13:17:30,060 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:17:30,061 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-12-21 13:17:30,061 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:30,062 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-12-21 13:17:30,062 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2021-12-21 13:17:30,062 INFO L87 Difference]: Start difference. First operand 1145 states and 1290 transitions. Second operand has 22 states, 22 states have (on average 11.863636363636363) internal successors, (261), 15 states have internal predecessors, (261), 7 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (48), 10 states have call predecessors, (48), 7 states have call successors, (48) [2021-12-21 13:17:31,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:31,098 INFO L93 Difference]: Finished difference Result 2238 states and 2552 transitions. [2021-12-21 13:17:31,099 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2021-12-21 13:17:31,099 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 11.863636363636363) internal successors, (261), 15 states have internal predecessors, (261), 7 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (48), 10 states have call predecessors, (48), 7 states have call successors, (48) Word has length 235 [2021-12-21 13:17:31,099 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:31,104 INFO L225 Difference]: With dead ends: 2238 [2021-12-21 13:17:31,104 INFO L226 Difference]: Without dead ends: 1207 [2021-12-21 13:17:31,106 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 574 GetRequests, 524 SyntacticMatches, 3 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 462 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=483, Invalid=1869, Unknown=0, NotChecked=0, Total=2352 [2021-12-21 13:17:31,106 INFO L933 BasicCegarLoop]: 155 mSDtfsCounter, 593 mSDsluCounter, 447 mSDsCounter, 0 mSdLazyCounter, 1536 mSolverCounterSat, 253 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 596 SdHoareTripleChecker+Valid, 602 SdHoareTripleChecker+Invalid, 1789 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 253 IncrementalHoareTripleChecker+Valid, 1536 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:31,107 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [596 Valid, 602 Invalid, 1789 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [253 Valid, 1536 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-12-21 13:17:31,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1207 states. [2021-12-21 13:17:31,146 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1207 to 1169. [2021-12-21 13:17:31,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1169 states, 871 states have (on average 1.1010332950631458) internal successors, (959), 911 states have internal predecessors, (959), 156 states have call successors, (156), 142 states have call predecessors, (156), 141 states have return successors, (187), 143 states have call predecessors, (187), 156 states have call successors, (187) [2021-12-21 13:17:31,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1169 states to 1169 states and 1302 transitions. [2021-12-21 13:17:31,151 INFO L78 Accepts]: Start accepts. Automaton has 1169 states and 1302 transitions. Word has length 235 [2021-12-21 13:17:31,151 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:31,151 INFO L470 AbstractCegarLoop]: Abstraction has 1169 states and 1302 transitions. [2021-12-21 13:17:31,151 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 11.863636363636363) internal successors, (261), 15 states have internal predecessors, (261), 7 states have call successors, (54), 8 states have call predecessors, (54), 11 states have return successors, (48), 10 states have call predecessors, (48), 7 states have call successors, (48) [2021-12-21 13:17:31,152 INFO L276 IsEmpty]: Start isEmpty. Operand 1169 states and 1302 transitions. [2021-12-21 13:17:31,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 237 [2021-12-21 13:17:31,155 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:31,155 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:31,187 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-21 13:17:31,372 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:31,373 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:31,373 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:31,374 INFO L85 PathProgramCache]: Analyzing trace with hash 213775524, now seen corresponding path program 1 times [2021-12-21 13:17:31,374 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:31,374 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [786303616] [2021-12-21 13:17:31,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:31,374 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:31,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:31,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:17:31,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:31,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:31,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:31,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:31,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-21 13:17:31,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:31,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:31,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:17:31,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-21 13:17:31,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:31,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-21 13:17:31,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-21 13:17:31,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2021-12-21 13:17:31,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:31,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:31,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:17:31,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:17:31,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-12-21 13:17:31,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2021-12-21 13:17:31,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 190 [2021-12-21 13:17:31,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2021-12-21 13:17:31,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:31,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:31,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 228 [2021-12-21 13:17:31,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,613 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 94 proven. 43 refuted. 0 times theorem prover too weak. 139 trivial. 0 not checked. [2021-12-21 13:17:31,613 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:31,613 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [786303616] [2021-12-21 13:17:31,613 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [786303616] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:17:31,614 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [119009129] [2021-12-21 13:17:31,614 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:31,614 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:31,614 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:31,628 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:17:31,629 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-12-21 13:17:31,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:31,758 INFO L263 TraceCheckSpWp]: Trace formula consists of 827 conjuncts, 18 conjunts are in the unsatisfiable core [2021-12-21 13:17:31,767 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:17:32,041 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 147 proven. 26 refuted. 0 times theorem prover too weak. 103 trivial. 0 not checked. [2021-12-21 13:17:32,041 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:17:32,640 INFO L134 CoverageAnalysis]: Checked inductivity of 276 backedges. 103 proven. 45 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2021-12-21 13:17:32,641 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [119009129] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:17:32,641 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:17:32,641 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 13] total 23 [2021-12-21 13:17:32,643 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1215841239] [2021-12-21 13:17:32,643 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:17:32,644 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2021-12-21 13:17:32,645 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:32,645 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2021-12-21 13:17:32,645 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=111, Invalid=395, Unknown=0, NotChecked=0, Total=506 [2021-12-21 13:17:32,645 INFO L87 Difference]: Start difference. First operand 1169 states and 1302 transitions. Second operand has 23 states, 23 states have (on average 10.695652173913043) internal successors, (246), 19 states have internal predecessors, (246), 14 states have call successors, (53), 11 states have call predecessors, (53), 13 states have return successors, (47), 14 states have call predecessors, (47), 14 states have call successors, (47) [2021-12-21 13:17:33,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:33,846 INFO L93 Difference]: Finished difference Result 2249 states and 2552 transitions. [2021-12-21 13:17:33,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2021-12-21 13:17:33,846 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 10.695652173913043) internal successors, (246), 19 states have internal predecessors, (246), 14 states have call successors, (53), 11 states have call predecessors, (53), 13 states have return successors, (47), 14 states have call predecessors, (47), 14 states have call successors, (47) Word has length 236 [2021-12-21 13:17:33,847 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:33,851 INFO L225 Difference]: With dead ends: 2249 [2021-12-21 13:17:33,852 INFO L226 Difference]: Without dead ends: 1639 [2021-12-21 13:17:33,853 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 586 GetRequests, 528 SyntacticMatches, 2 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 682 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=822, Invalid=2484, Unknown=0, NotChecked=0, Total=3306 [2021-12-21 13:17:33,854 INFO L933 BasicCegarLoop]: 230 mSDtfsCounter, 1285 mSDsluCounter, 322 mSDsCounter, 0 mSdLazyCounter, 1506 mSolverCounterSat, 726 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1288 SdHoareTripleChecker+Valid, 552 SdHoareTripleChecker+Invalid, 2232 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 726 IncrementalHoareTripleChecker+Valid, 1506 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:33,854 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1288 Valid, 552 Invalid, 2232 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [726 Valid, 1506 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-12-21 13:17:33,856 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1639 states. [2021-12-21 13:17:33,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1639 to 1499. [2021-12-21 13:17:33,912 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1499 states, 1115 states have (on average 1.1004484304932736) internal successors, (1227), 1162 states have internal predecessors, (1227), 202 states have call successors, (202), 185 states have call predecessors, (202), 181 states have return successors, (239), 185 states have call predecessors, (239), 202 states have call successors, (239) [2021-12-21 13:17:33,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1499 states to 1499 states and 1668 transitions. [2021-12-21 13:17:33,920 INFO L78 Accepts]: Start accepts. Automaton has 1499 states and 1668 transitions. Word has length 236 [2021-12-21 13:17:33,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:33,920 INFO L470 AbstractCegarLoop]: Abstraction has 1499 states and 1668 transitions. [2021-12-21 13:17:33,920 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 10.695652173913043) internal successors, (246), 19 states have internal predecessors, (246), 14 states have call successors, (53), 11 states have call predecessors, (53), 13 states have return successors, (47), 14 states have call predecessors, (47), 14 states have call successors, (47) [2021-12-21 13:17:33,920 INFO L276 IsEmpty]: Start isEmpty. Operand 1499 states and 1668 transitions. [2021-12-21 13:17:33,924 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 292 [2021-12-21 13:17:33,924 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:17:33,924 INFO L514 BasicCegarLoop]: trace histogram [9, 9, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:33,941 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2021-12-21 13:17:34,139 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:34,140 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:17:34,140 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:17:34,140 INFO L85 PathProgramCache]: Analyzing trace with hash -1228071505, now seen corresponding path program 1 times [2021-12-21 13:17:34,140 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:17:34,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [575448218] [2021-12-21 13:17:34,140 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:34,140 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:17:34,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:34,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:17:34,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:34,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:34,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:34,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:34,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2021-12-21 13:17:34,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:34,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:34,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:17:34,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-21 13:17:34,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:34,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-12-21 13:17:34,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-12-21 13:17:34,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2021-12-21 13:17:34,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:34,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:17:34,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-21 13:17:34,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-21 13:17:34,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-12-21 13:17:34,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2021-12-21 13:17:34,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2021-12-21 13:17:34,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:17:34,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2021-12-21 13:17:34,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:34,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:34,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2021-12-21 13:17:34,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 235 [2021-12-21 13:17:34,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 245 [2021-12-21 13:17:34,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 254 [2021-12-21 13:17:34,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:17:34,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:17:34,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2021-12-21 13:17:34,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,344 INFO L134 CoverageAnalysis]: Checked inductivity of 469 backedges. 127 proven. 89 refuted. 0 times theorem prover too weak. 253 trivial. 0 not checked. [2021-12-21 13:17:34,344 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:17:34,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [575448218] [2021-12-21 13:17:34,344 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [575448218] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:17:34,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [260003884] [2021-12-21 13:17:34,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:17:34,344 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:17:34,344 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:17:34,372 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:17:34,373 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-12-21 13:17:34,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:17:34,508 INFO L263 TraceCheckSpWp]: Trace formula consists of 965 conjuncts, 30 conjunts are in the unsatisfiable core [2021-12-21 13:17:34,513 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:17:35,003 INFO L134 CoverageAnalysis]: Checked inductivity of 469 backedges. 169 proven. 89 refuted. 0 times theorem prover too weak. 211 trivial. 0 not checked. [2021-12-21 13:17:35,003 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-12-21 13:17:35,755 INFO L134 CoverageAnalysis]: Checked inductivity of 469 backedges. 102 proven. 136 refuted. 0 times theorem prover too weak. 231 trivial. 0 not checked. [2021-12-21 13:17:35,755 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [260003884] provided 0 perfect and 2 imperfect interpolant sequences [2021-12-21 13:17:35,756 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-12-21 13:17:35,756 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 11, 16] total 28 [2021-12-21 13:17:35,756 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1192717531] [2021-12-21 13:17:35,756 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-12-21 13:17:35,757 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2021-12-21 13:17:35,757 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:17:35,757 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2021-12-21 13:17:35,758 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=131, Invalid=625, Unknown=0, NotChecked=0, Total=756 [2021-12-21 13:17:35,758 INFO L87 Difference]: Start difference. First operand 1499 states and 1668 transitions. Second operand has 28 states, 28 states have (on average 11.321428571428571) internal successors, (317), 24 states have internal predecessors, (317), 17 states have call successors, (63), 13 states have call predecessors, (63), 17 states have return successors, (66), 17 states have call predecessors, (66), 17 states have call successors, (66) [2021-12-21 13:17:37,848 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:17:37,849 INFO L93 Difference]: Finished difference Result 3921 states and 4446 transitions. [2021-12-21 13:17:37,849 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2021-12-21 13:17:37,849 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 11.321428571428571) internal successors, (317), 24 states have internal predecessors, (317), 17 states have call successors, (63), 13 states have call predecessors, (63), 17 states have return successors, (66), 17 states have call predecessors, (66), 17 states have call successors, (66) Word has length 291 [2021-12-21 13:17:37,850 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:17:37,850 INFO L225 Difference]: With dead ends: 3921 [2021-12-21 13:17:37,850 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:17:37,860 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 716 GetRequests, 648 SyntacticMatches, 4 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 884 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=1021, Invalid=3269, Unknown=0, NotChecked=0, Total=4290 [2021-12-21 13:17:37,860 INFO L933 BasicCegarLoop]: 218 mSDtfsCounter, 1193 mSDsluCounter, 679 mSDsCounter, 0 mSdLazyCounter, 2981 mSolverCounterSat, 740 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1197 SdHoareTripleChecker+Valid, 897 SdHoareTripleChecker+Invalid, 3721 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 740 IncrementalHoareTripleChecker+Valid, 2981 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:17:37,860 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1197 Valid, 897 Invalid, 3721 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [740 Valid, 2981 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2021-12-21 13:17:37,862 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:17:37,862 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:17:37,862 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:17:37,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:17:37,863 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 291 [2021-12-21 13:17:37,863 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:17:37,863 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:17:37,864 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 11.321428571428571) internal successors, (317), 24 states have internal predecessors, (317), 17 states have call successors, (63), 13 states have call predecessors, (63), 17 states have return successors, (66), 17 states have call predecessors, (66), 17 states have call successors, (66) [2021-12-21 13:17:37,864 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:17:37,864 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:17:37,866 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:17:37,889 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-12-21 13:17:38,083 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-12-21 13:17:38,085 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:17:52,605 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 466 473) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (= 1 ~systemActive~0))) (or .cse0 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2021-12-21 13:17:52,605 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 466 473) no Hoare annotation was computed. [2021-12-21 13:17:52,606 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 466 473) no Hoare annotation was computed. [2021-12-21 13:17:52,606 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 356 362) no Hoare annotation was computed. [2021-12-21 13:17:52,606 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 356 362) the Hoare annotation is: true [2021-12-21 13:17:52,606 INFO L854 garLoopResultBuilder]: At program point L409(line 409) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-21 13:17:52,606 INFO L858 garLoopResultBuilder]: For program point L409-1(lines 390 414) no Hoare annotation was computed. [2021-12-21 13:17:52,606 INFO L854 garLoopResultBuilder]: At program point L564(lines 549 567) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (let ((.cse1 (= ~waterLevel~0 0))) (let ((.cse2 (not .cse1))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~8#1| 1) .cse1) (and .cse2 (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~8#1| 0))) (or (and .cse2 (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) (and .cse1 (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 1)))))) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-21 13:17:52,606 INFO L858 garLoopResultBuilder]: For program point L558(lines 558 562) no Hoare annotation was computed. [2021-12-21 13:17:52,606 INFO L858 garLoopResultBuilder]: For program point L558-2(lines 558 562) no Hoare annotation was computed. [2021-12-21 13:17:52,606 INFO L854 garLoopResultBuilder]: At program point L682(lines 677 685) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (let ((.cse1 (= ~waterLevel~0 0))) (or (and (not .cse1) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) (and .cse1 (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 1))))) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-21 13:17:52,606 INFO L854 garLoopResultBuilder]: At program point L404(line 404) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (let ((.cse1 (= ~waterLevel~0 0))) (let ((.cse2 (not .cse1))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~8#1| 1) .cse1) (and .cse2 (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~8#1| 0))) (or (and .cse2 (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) (and .cse1 (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 1)))))) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-21 13:17:52,606 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 390 414) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:52,606 INFO L854 garLoopResultBuilder]: At program point L400(line 400) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (let ((.cse1 (= ~waterLevel~0 0))) (let ((.cse2 (not .cse1))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (and (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~8#1| 1) .cse1) (and .cse2 (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~8#1| 0))) (or (and .cse2 (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) (and .cse1 (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 1)))))) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-21 13:17:52,606 INFO L858 garLoopResultBuilder]: For program point L398(lines 398 406) no Hoare annotation was computed. [2021-12-21 13:17:52,606 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 390 414) no Hoare annotation was computed. [2021-12-21 13:17:52,606 INFO L858 garLoopResultBuilder]: For program point L394(lines 394 411) no Hoare annotation was computed. [2021-12-21 13:17:52,606 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 485 493) no Hoare annotation was computed. [2021-12-21 13:17:52,607 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 485 493) the Hoare annotation is: true [2021-12-21 13:17:52,607 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 485 493) no Hoare annotation was computed. [2021-12-21 13:17:52,607 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 610 621) the Hoare annotation is: (let ((.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse4) (or (not (= ~pumpRunning~0 0)) .cse1 .cse2 .cse4) (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse3 .cse4 (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:52,607 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 610 621) no Hoare annotation was computed. [2021-12-21 13:17:52,607 INFO L858 garLoopResultBuilder]: For program point L614-1(lines 610 621) no Hoare annotation was computed. [2021-12-21 13:17:52,607 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 222 251) no Hoare annotation was computed. [2021-12-21 13:17:52,607 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 222 251) the Hoare annotation is: true [2021-12-21 13:17:52,607 INFO L861 garLoopResultBuilder]: At program point L247(lines 222 251) the Hoare annotation is: true [2021-12-21 13:17:52,607 INFO L858 garLoopResultBuilder]: For program point L243(line 243) no Hoare annotation was computed. [2021-12-21 13:17:52,607 INFO L858 garLoopResultBuilder]: For program point L236(lines 236 240) no Hoare annotation was computed. [2021-12-21 13:17:52,607 INFO L861 garLoopResultBuilder]: At program point L236-1(lines 236 240) the Hoare annotation is: true [2021-12-21 13:17:52,607 INFO L858 garLoopResultBuilder]: For program point L233(line 233) no Hoare annotation was computed. [2021-12-21 13:17:52,607 INFO L861 garLoopResultBuilder]: At program point L232-2(lines 232 246) the Hoare annotation is: true [2021-12-21 13:17:52,607 INFO L861 garLoopResultBuilder]: At program point L228(line 228) the Hoare annotation is: true [2021-12-21 13:17:52,607 INFO L858 garLoopResultBuilder]: For program point L228-1(line 228) no Hoare annotation was computed. [2021-12-21 13:17:52,607 INFO L858 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2021-12-21 13:17:52,607 INFO L854 garLoopResultBuilder]: At program point L659(lines 654 662) the Hoare annotation is: (let ((.cse12 (+ ~waterLevel~0 1))) (let ((.cse22 (<= ~waterLevel~0 0)) (.cse3 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse4 (= 1 ~systemActive~0)) (.cse5 (<= .cse12 |old(~waterLevel~0)|)) (.cse6 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse23 (= ~waterLevel~0 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse17 (<= |timeShift_getWaterLevel_#res#1| 2)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (<= 2 |timeShift_getWaterLevel_#res#1|))) (let ((.cse15 (not (= 0 ~systemActive~0))) (.cse16 (and .cse2 .cse17 .cse14 .cse18)) (.cse13 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse21 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse8 .cse23)) (.cse19 (not (<= |old(~waterLevel~0)| 1))) (.cse20 (= ~methaneLevelCritical~0 0)) (.cse0 (not .cse4)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse24 (and .cse2 .cse3 .cse6 .cse22 .cse14 .cse8)) (.cse25 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (let ((.cse7 (<= |old(~waterLevel~0)| .cse12))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse3 .cse5 .cse6 .cse7 .cse8) .cse10 .cse11)) (or .cse13 (and .cse2 .cse14) .cse15) (or .cse13 (= 2 |timeShift_getWaterLevel_#res#1|) (not (< 1 |old(~waterLevel~0)|)) .cse10 .cse15) (or .cse16 (and (<= 1 ~pumpRunning~0) .cse17 .cse14 .cse18) .cse13 .cse0 .cse10 .cse11) (or .cse19 .cse13 .cse0 (and .cse2 .cse3 .cse14)) (or .cse20 .cse0 .cse1 .cse10 (and .cse2 .cse4) .cse11) (or .cse16 .cse13 .cse20 .cse0 .cse10 .cse11) (or .cse21 .cse19 .cse0 .cse1 (and .cse9 .cse3 .cse6 .cse22 .cse14 .cse8) (and .cse9 .cse3 .cse5 .cse6 .cse8 .cse23) .cse24 .cse25) (or .cse21 .cse19 .cse20 .cse0 .cse1 .cse24 .cse25))))) [2021-12-21 13:17:52,607 INFO L858 garLoopResultBuilder]: For program point L424(lines 424 432) no Hoare annotation was computed. [2021-12-21 13:17:52,607 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 329 355) no Hoare annotation was computed. [2021-12-21 13:17:52,608 INFO L854 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse7)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse4 (and .cse5 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2) .cse6) (not (< 1 |old(~waterLevel~0)|)) .cse3) (or (and .cse5 .cse7 .cse6) .cse2 .cse4 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2021-12-21 13:17:52,608 INFO L858 garLoopResultBuilder]: For program point L420(lines 420 437) no Hoare annotation was computed. [2021-12-21 13:17:52,608 INFO L854 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse16 (= 1 ~systemActive~0)) (.cse23 (+ ~waterLevel~0 1))) (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse5 (<= |old(~waterLevel~0)| 1)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= .cse23 |old(~waterLevel~0)|)) (.cse10 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse8 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse20 (not (<= |old(~waterLevel~0)| 0))) (.cse14 (not .cse16)) (.cse15 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (= ~pumpRunning~0 0)) (.cse18 (not (= |old(~waterLevel~0)| 1))) (.cse17 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse19 (= ~methaneLevelCritical~0 0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse22 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2) .cse3) (or .cse0 (not (< 1 |old(~waterLevel~0)|)) .cse4 .cse3) (let ((.cse12 (= ~waterLevel~0 0)) (.cse13 (<= ~waterLevel~0 0))) (or (not .cse5) (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse1 .cse7 .cse8 .cse10 .cse13 .cse2 .cse11) .cse14 .cse15 (and .cse1 .cse7 .cse8 .cse16 .cse9 .cse10 .cse11 .cse12) (and .cse6 .cse7 .cse8 .cse10 .cse13 .cse2 .cse11) .cse17)) (or .cse0 .cse18 .cse14 (and .cse1 .cse7 .cse8 (= ~waterLevel~0 1))) (or .cse1 .cse19 .cse14 .cse15 .cse20 .cse17) (or .cse0 .cse14 .cse4 .cse5) (let ((.cse21 (<= |old(~waterLevel~0)| .cse23))) (or .cse14 .cse15 (and .cse1 .cse7 .cse8 .cse16 .cse9 .cse10 .cse21 .cse11) .cse4 (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse21 .cse11) .cse22)) (or .cse0 .cse14 (and .cse1 .cse7 .cse8 .cse2) .cse20) (or .cse14 .cse15 (and .cse1 .cse16) (and (or .cse18 .cse19 .cse17) (or .cse19 .cse4 .cse22)))))) [2021-12-21 13:17:52,608 INFO L858 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2021-12-21 13:17:52,608 INFO L858 garLoopResultBuilder]: For program point L144(line 144) no Hoare annotation was computed. [2021-12-21 13:17:52,608 INFO L858 garLoopResultBuilder]: For program point L590(lines 590 594) no Hoare annotation was computed. [2021-12-21 13:17:52,608 INFO L854 garLoopResultBuilder]: At program point L590-2(lines 586 597) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (and (<= ~waterLevel~0 0) .cse2) .cse3 (= ~waterLevel~0 0) .cse4) (or .cse0 (and .cse5 .cse2 .cse6) .cse1 .cse3 (and .cse5 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse6) .cse4) (or .cse1 .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 (= ~waterLevel~0 1) .cse6) .cse7) (or .cse8 .cse1 .cse7) (or .cse8 (not (= 0 ~systemActive~0))))) [2021-12-21 13:17:52,608 INFO L858 garLoopResultBuilder]: For program point L343-1(lines 343 349) no Hoare annotation was computed. [2021-12-21 13:17:52,608 INFO L854 garLoopResultBuilder]: At program point L145(lines 140 147) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse2) (or .cse3 .cse0 .cse2) (or .cse3 (not (= 0 ~systemActive~0))))) [2021-12-21 13:17:52,608 INFO L854 garLoopResultBuilder]: At program point L430(line 430) the Hoare annotation is: (let ((.cse0 (= ~methaneLevelCritical~0 0)) (.cse8 (= 1 ~systemActive~0)) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (and .cse9 .cse11 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse12)) (.cse6 (let ((.cse10 (+ ~waterLevel~0 1))) (and (<= 1 ~pumpRunning~0) .cse9 .cse0 (<= ~waterLevel~0 1) .cse8 (<= .cse10 |old(~waterLevel~0)|) .cse11 (<= |old(~waterLevel~0)| .cse10) .cse12))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not .cse8)) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 (not (<= |old(~waterLevel~0)| 0)) .cse4) (or .cse1 .cse2 .cse3 .cse6 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse2 .cse5 .cse3 .cse6 .cse4) (or .cse7 .cse1 .cse3) (or .cse7 (not (= 0 ~systemActive~0)))))) [2021-12-21 13:17:52,608 INFO L854 garLoopResultBuilder]: At program point L426(line 426) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse9 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 (and .cse1 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse2 .cse3 (= ~waterLevel~0 0)) .cse4 (and .cse1 .cse2 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) .cse5) (or .cse0 .cse4 .cse6 .cse7 (and .cse1 .cse2 (= ~waterLevel~0 1) .cse3)) (or .cse0 .cse4 .cse6 .cse8 .cse7) (or .cse9 .cse0 .cse7) (or .cse0 .cse4 .cse8 .cse7 .cse5) (or .cse9 (not (= 0 ~systemActive~0))))) [2021-12-21 13:17:52,608 INFO L854 garLoopResultBuilder]: At program point L422(line 422) the Hoare annotation is: (let ((.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (and (<= ~waterLevel~0 0) .cse2) .cse3 (= ~waterLevel~0 0) .cse4) (or .cse0 (and .cse5 .cse2 .cse6) .cse1 .cse3 (and .cse5 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse6) .cse4) (or .cse1 .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 (= ~waterLevel~0 1) .cse6) .cse7) (or .cse8 .cse1 .cse7) (or .cse8 (not (= 0 ~systemActive~0))))) [2021-12-21 13:17:52,608 INFO L858 garLoopResultBuilder]: For program point L422-1(line 422) no Hoare annotation was computed. [2021-12-21 13:17:52,609 INFO L854 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse3 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse3 .cse5)))) [2021-12-21 13:17:52,609 INFO L858 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2021-12-21 13:17:52,609 INFO L858 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2021-12-21 13:17:52,609 INFO L854 garLoopResultBuilder]: At program point L435(line 435) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse2) (or .cse1 .cse3 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse1 .cse3 (not (< 1 |old(~waterLevel~0)|)) .cse2) (or .cse0 (not (= 0 ~systemActive~0))))) [2021-12-21 13:17:52,609 INFO L854 garLoopResultBuilder]: At program point L435-1(lines 416 440) the Hoare annotation is: (let ((.cse18 (= 1 ~systemActive~0)) (.cse7 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse17 (= ~waterLevel~0 1)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse12 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse13 (and .cse1 .cse14)) (.cse15 (and .cse1 .cse18 .cse7 .cse17 .cse8)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not .cse18)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (let ((.cse9 (= ~waterLevel~0 0))) (or (and .cse6 .cse7 .cse8 .cse9) (and .cse1 .cse7 .cse8 .cse9) (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse5)) (or .cse10 .cse1 .cse2 .cse3 .cse11 .cse12) (or .cse10 .cse13 .cse3 (and (<= 1 ~pumpRunning~0) .cse14) .cse11 .cse12) (or .cse15 .cse3 .cse4 .cse16 .cse11 (and .cse6 .cse7 .cse17 .cse8)) (or .cse0 .cse10 .cse13 .cse3) (or .cse15 .cse2 .cse3 .cse4 .cse16 .cse11) (or (and .cse1 .cse7 .cse14 .cse8) .cse3 .cse4 (and .cse6 .cse7 .cse14 .cse8) (not (<= |old(~waterLevel~0)| 0)) .cse5) (or .cse10 (not (= 0 ~systemActive~0)))))) [2021-12-21 13:17:52,609 INFO L858 garLoopResultBuilder]: For program point L336(lines 336 342) no Hoare annotation was computed. [2021-12-21 13:17:52,609 INFO L858 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2021-12-21 13:17:52,609 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 329 355) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse7)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse3 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse3 .cse5)))) [2021-12-21 13:17:52,609 INFO L854 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse24 (+ ~waterLevel~0 1)) (.cse1 (= ~pumpRunning~0 0)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse10 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse8 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (and .cse1 .cse14)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse16 (not (<= 2 |old(~waterLevel~0)|))) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (not .cse14)) (.cse17 (not (<= 1 |old(~pumpRunning~0)|))) (.cse20 (<= .cse24 |old(~waterLevel~0)|)) (.cse19 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1|)) (.cse11 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse12 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse21 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse23 (<= 1 ~switchedOnBeforeTS~0)) (.cse18 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 (and .cse1 .cse2) .cse3) (or .cse0 .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse8 (and .cse9 .cse10) .cse6 .cse3) (or (and .cse1 .cse11 .cse12 .cse13 .cse14 .cse2) .cse15 .cse0 .cse5) (or .cse0 .cse5 (and (<= 1 ~pumpRunning~0) .cse9 .cse2 .cse10) (and .cse1 .cse9 .cse14 .cse2 .cse10) .cse6 .cse16) (or .cse15 .cse4 .cse5 .cse17 .cse7 .cse18) (or .cse4 .cse5 .cse17 .cse8 .cse6 .cse7) (let ((.cse22 (<= |old(~waterLevel~0)| .cse24))) (or (and .cse19 .cse11 .cse12 .cse13 .cse20 .cse21 .cse22 .cse23) .cse5 .cse17 (and .cse1 .cse11 .cse12 .cse14 .cse20 .cse21 .cse22 .cse23) .cse6 .cse16)) (let ((.cse25 (= ~waterLevel~0 0)) (.cse26 (<= ~waterLevel~0 0))) (or .cse15 .cse5 .cse17 (and .cse1 .cse11 .cse12 .cse14 .cse20 .cse21 .cse23 .cse25) (and .cse19 .cse11 .cse12 .cse13 .cse20 .cse21 .cse23 .cse25) (and .cse19 .cse11 .cse12 .cse13 .cse21 .cse26 .cse2 .cse23) (and .cse1 .cse11 .cse12 .cse14 .cse21 .cse26 .cse2 .cse23) .cse18))))) [2021-12-21 13:17:52,609 INFO L858 garLoopResultBuilder]: For program point L336-2(lines 332 354) no Hoare annotation was computed. [2021-12-21 13:17:52,609 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 329 355) no Hoare annotation was computed. [2021-12-21 13:17:52,609 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 144) no Hoare annotation was computed. [2021-12-21 13:17:52,609 INFO L858 garLoopResultBuilder]: For program point L572(lines 572 578) no Hoare annotation was computed. [2021-12-21 13:17:52,609 INFO L858 garLoopResultBuilder]: For program point L572-1(lines 572 578) no Hoare annotation was computed. [2021-12-21 13:17:52,610 INFO L858 garLoopResultBuilder]: For program point L184(lines 184 190) no Hoare annotation was computed. [2021-12-21 13:17:52,610 INFO L858 garLoopResultBuilder]: For program point L184-1(lines 184 190) no Hoare annotation was computed. [2021-12-21 13:17:52,610 INFO L854 garLoopResultBuilder]: At program point L209(lines 164 211) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse3 .cse4) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse5 (<= ~waterLevel~0 1) .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse6) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse6))) [2021-12-21 13:17:52,610 INFO L854 garLoopResultBuilder]: At program point L176(line 176) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse3 .cse4) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse5 (<= ~waterLevel~0 1) .cse3 .cse4) (and .cse0 .cse2 .cse3 .cse4 (<= ~waterLevel~0 0) .cse6) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse6))) [2021-12-21 13:17:52,610 INFO L854 garLoopResultBuilder]: At program point L135(lines 130 138) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:52,610 INFO L861 garLoopResultBuilder]: At program point L292(lines 284 294) the Hoare annotation is: true [2021-12-21 13:17:52,610 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:17:52,610 INFO L854 garLoopResultBuilder]: At program point L127(lines 123 129) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:52,610 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:17:52,610 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:17:52,610 INFO L858 garLoopResultBuilder]: For program point L305(lines 305 312) no Hoare annotation was computed. [2021-12-21 13:17:52,610 INFO L858 garLoopResultBuilder]: For program point L305-2(lines 305 312) no Hoare annotation was computed. [2021-12-21 13:17:52,610 INFO L858 garLoopResultBuilder]: For program point L165(lines 164 211) no Hoare annotation was computed. [2021-12-21 13:17:52,610 INFO L858 garLoopResultBuilder]: For program point L194(lines 194 207) no Hoare annotation was computed. [2021-12-21 13:17:52,610 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:17:52,610 INFO L854 garLoopResultBuilder]: At program point L574(line 574) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2021-12-21 13:17:52,610 INFO L854 garLoopResultBuilder]: At program point L186(line 186) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (< 1 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse5 .cse3 (= 0 ~systemActive~0)) (and .cse5 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-21 13:17:52,610 INFO L861 garLoopResultBuilder]: At program point L314(lines 295 317) the Hoare annotation is: true [2021-12-21 13:17:52,610 INFO L854 garLoopResultBuilder]: At program point L281(lines 277 283) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:52,610 INFO L854 garLoopResultBuilder]: At program point L120(lines 116 122) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:52,611 INFO L861 garLoopResultBuilder]: At program point L215(lines 154 219) the Hoare annotation is: true [2021-12-21 13:17:52,611 INFO L858 garLoopResultBuilder]: For program point L174(lines 174 180) no Hoare annotation was computed. [2021-12-21 13:17:52,611 INFO L858 garLoopResultBuilder]: For program point L174-1(lines 174 180) no Hoare annotation was computed. [2021-12-21 13:17:52,611 INFO L858 garLoopResultBuilder]: For program point L166(lines 166 170) no Hoare annotation was computed. [2021-12-21 13:17:52,611 INFO L854 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:17:52,611 INFO L854 garLoopResultBuilder]: At program point L212(lines 163 213) the Hoare annotation is: false [2021-12-21 13:17:52,611 INFO L858 garLoopResultBuilder]: For program point L200(lines 200 206) no Hoare annotation was computed. [2021-12-21 13:17:52,614 INFO L854 garLoopResultBuilder]: At program point L200-2(lines 194 207) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and .cse4 .cse2 (= 0 ~systemActive~0)) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2021-12-21 13:17:52,614 INFO L854 garLoopResultBuilder]: At program point L580(lines 568 582) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0)) [2021-12-21 13:17:52,614 INFO L854 garLoopResultBuilder]: At program point L545(lines 530 548) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse0 .cse1) (or .cse2 (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2021-12-21 13:17:52,615 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 364 388) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:52,615 INFO L854 garLoopResultBuilder]: At program point L446(lines 441 448) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~methaneLevelCritical~0 0))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0) .cse1) (not (<= ~waterLevel~0 2))))) [2021-12-21 13:17:52,615 INFO L858 garLoopResultBuilder]: For program point L667(lines 667 673) no Hoare annotation was computed. [2021-12-21 13:17:52,615 INFO L858 garLoopResultBuilder]: For program point L539(lines 539 543) no Hoare annotation was computed. [2021-12-21 13:17:52,615 INFO L854 garLoopResultBuilder]: At program point L378(line 378) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:52,615 INFO L858 garLoopResultBuilder]: For program point L539-2(lines 539 543) no Hoare annotation was computed. [2021-12-21 13:17:52,615 INFO L858 garLoopResultBuilder]: For program point L372(lines 372 380) no Hoare annotation was computed. [2021-12-21 13:17:52,615 INFO L858 garLoopResultBuilder]: For program point L368(lines 368 385) no Hoare annotation was computed. [2021-12-21 13:17:52,615 INFO L854 garLoopResultBuilder]: At program point L672(lines 663 676) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse2 .cse0 .cse1))) [2021-12-21 13:17:52,616 INFO L854 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2021-12-21 13:17:52,616 INFO L858 garLoopResultBuilder]: For program point L383-1(lines 364 388) no Hoare annotation was computed. [2021-12-21 13:17:52,616 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 364 388) no Hoare annotation was computed. [2021-12-21 13:17:52,616 INFO L858 garLoopResultBuilder]: For program point L456(lines 456 462) no Hoare annotation was computed. [2021-12-21 13:17:52,616 INFO L854 garLoopResultBuilder]: At program point L454(line 454) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or .cse2 .cse0 .cse1))) [2021-12-21 13:17:52,616 INFO L854 garLoopResultBuilder]: At program point L456-2(lines 449 465) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse2 .cse1 .cse0 .cse3 (and (not (= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|)) .cse4)) (let ((.cse5 (= 2 ~waterLevel~0))) (or .cse2 .cse0 (and (<= 1 ~pumpRunning~0) .cse5) (and .cse4 .cse5) .cse3)))) [2021-12-21 13:17:52,616 INFO L858 garLoopResultBuilder]: For program point L454-1(line 454) no Hoare annotation was computed. [2021-12-21 13:17:52,616 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 598 609) no Hoare annotation was computed. [2021-12-21 13:17:52,616 INFO L858 garLoopResultBuilder]: For program point L602-1(lines 598 609) no Hoare annotation was computed. [2021-12-21 13:17:52,617 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 598 609) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse3 (not (= 0 ~systemActive~0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse5 .cse0 .cse3 .cse4))) [2021-12-21 13:17:52,617 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 474 484) the Hoare annotation is: true [2021-12-21 13:17:52,617 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 474 484) no Hoare annotation was computed. [2021-12-21 13:17:52,617 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 474 484) no Hoare annotation was computed. [2021-12-21 13:17:52,617 INFO L854 garLoopResultBuilder]: At program point L627(lines 622 630) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= |isMethaneAlarm_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0))) (and (or (not (<= ~waterLevel~0 0)) .cse0 .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= ~waterLevel~0 2)) (< ~waterLevel~0 2) .cse2))) [2021-12-21 13:17:52,619 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:17:52,624 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:17:52,675 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:17:52 BoogieIcfgContainer [2021-12-21 13:17:52,680 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:17:52,681 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:17:52,681 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:17:52,682 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:17:52,682 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:17:20" (3/4) ... [2021-12-21 13:17:52,684 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:17:52,688 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-21 13:17:52,688 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:17:52,688 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:17:52,688 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:17:52,688 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:17:52,688 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-21 13:17:52,689 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:17:52,689 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:17:52,689 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2021-12-21 13:17:52,689 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-21 13:17:52,701 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-21 13:17:52,702 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:17:52,702 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:17:52,703 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:17:52,703 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:17:52,703 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:17:52,703 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:17:52,720 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-21 13:17:52,720 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (waterLevel <= 0 && \old(waterLevel) == waterLevel)) || !(1 <= \old(pumpRunning))) || waterLevel == 0) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-12-21 13:17:52,721 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && 1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || (2 == \result && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || ((((pumpRunning == 0 && 2 == \result) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == 0 && 1 == systemActive)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && 1 == systemActive))) && ((((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-21 13:17:52,721 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(waterLevel) <= 1) || pumpRunning == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && ((((((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((pumpRunning == 0 && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && (((((((((pumpRunning == 0 && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-12-21 13:17:52,722 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2021-12-21 13:17:52,722 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && 1 <= switchedOnBeforeTS)) || (((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || 2 == \result) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || (((1 <= pumpRunning && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || (((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || !(\old(waterLevel) <= 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2021-12-21 13:17:52,722 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(waterLevel <= 0) || !(1 == systemActive)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((!(waterLevel == 1) || !(1 == systemActive)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && ((((!(pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || waterLevel < 2) || \result == methaneLevelCritical) [2021-12-21 13:17:52,723 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && ((!(waterLevel == 0) && \result == 0) || (waterLevel == 0 && \result == 1)))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-21 13:17:52,723 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (!(0 == tmp) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) [2021-12-21 13:17:52,725 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && (((1 <= \result || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 1)) [2021-12-21 13:17:52,726 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0)) || !(waterLevel <= 2)) [2021-12-21 13:17:52,726 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || ((pumpRunning == \old(pumpRunning) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) && ((!(waterLevel == 0) && \result == 0) || (waterLevel == 0 && \result == 1)))) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-21 13:17:52,726 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (tmp___0 == 0 && \result == 0)) || !(1 == systemActive)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2021-12-21 13:17:52,755 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:17:52,756 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:17:52,756 INFO L158 Benchmark]: Toolchain (without parser) took 33468.32ms. Allocated memory was 130.0MB in the beginning and 570.4MB in the end (delta: 440.4MB). Free memory was 101.9MB in the beginning and 395.1MB in the end (delta: -293.2MB). Peak memory consumption was 146.4MB. Max. memory is 16.1GB. [2021-12-21 13:17:52,756 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 92.3MB. Free memory was 50.6MB in the beginning and 50.5MB in the end (delta: 45.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:17:52,757 INFO L158 Benchmark]: CACSL2BoogieTranslator took 413.93ms. Allocated memory is still 130.0MB. Free memory was 101.9MB in the beginning and 98.1MB in the end (delta: 3.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-21 13:17:52,757 INFO L158 Benchmark]: Boogie Procedure Inliner took 59.22ms. Allocated memory is still 130.0MB. Free memory was 98.1MB in the beginning and 95.4MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-12-21 13:17:52,757 INFO L158 Benchmark]: Boogie Preprocessor took 39.70ms. Allocated memory is still 130.0MB. Free memory was 95.4MB in the beginning and 93.7MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:17:52,758 INFO L158 Benchmark]: RCFGBuilder took 461.64ms. Allocated memory is still 130.0MB. Free memory was 93.7MB in the beginning and 75.6MB in the end (delta: 18.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2021-12-21 13:17:52,758 INFO L158 Benchmark]: TraceAbstraction took 32413.47ms. Allocated memory was 130.0MB in the beginning and 570.4MB in the end (delta: 440.4MB). Free memory was 75.2MB in the beginning and 402.5MB in the end (delta: -327.2MB). Peak memory consumption was 323.6MB. Max. memory is 16.1GB. [2021-12-21 13:17:52,758 INFO L158 Benchmark]: Witness Printer took 74.71ms. Allocated memory is still 570.4MB. Free memory was 402.5MB in the beginning and 395.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-21 13:17:52,760 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 92.3MB. Free memory was 50.6MB in the beginning and 50.5MB in the end (delta: 45.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 413.93ms. Allocated memory is still 130.0MB. Free memory was 101.9MB in the beginning and 98.1MB in the end (delta: 3.8MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 59.22ms. Allocated memory is still 130.0MB. Free memory was 98.1MB in the beginning and 95.4MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 39.70ms. Allocated memory is still 130.0MB. Free memory was 95.4MB in the beginning and 93.7MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 461.64ms. Allocated memory is still 130.0MB. Free memory was 93.7MB in the beginning and 75.6MB in the end (delta: 18.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 32413.47ms. Allocated memory was 130.0MB in the beginning and 570.4MB in the end (delta: 440.4MB). Free memory was 75.2MB in the beginning and 402.5MB in the end (delta: -327.2MB). Peak memory consumption was 323.6MB. Max. memory is 16.1GB. * Witness Printer took 74.71ms. Allocated memory is still 570.4MB. Free memory was 402.5MB in the beginning and 395.1MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 144]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 117 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 32.3s, OverallIterations: 14, TraceHistogramMax: 9, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 9.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 14.5s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 7117 SdHoareTripleChecker+Valid, 5.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 7052 mSDsluCounter, 8786 SdHoareTripleChecker+Invalid, 4.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6396 mSDsCounter, 3418 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 12162 IncrementalHoareTripleChecker+Invalid, 15580 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3418 mSolverCounterUnsat, 2390 mSDtfsCounter, 12162 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2938 GetRequests, 2543 SyntacticMatches, 20 SemanticMatches, 375 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5160 ImplicationChecksByTransitivity, 3.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1499occurred in iteration=13, InterpolantAutomatonStates: 295, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 14 MinimizatonAttempts, 713 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 54 LocationsWithAnnotation, 5566 PreInvPairs, 6454 NumberOfFragments, 3763 HoareAnnotationTreeSize, 5566 FomulaSimplifications, 26350 FormulaSimplificationTreeSizeReduction, 1.9s HoareSimplificationTime, 54 FomulaSimplificationsInter, 165886 FormulaSimplificationTreeSizeReductionInter, 12.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 5.9s InterpolantComputationTime, 2716 NumberOfCodeBlocks, 2716 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 3786 ConstructedInterpolants, 0 QuantifiedInterpolants, 8687 SizeOfPredicates, 14 NumberOfNonLiveVariables, 3923 ConjunctsInSsa, 81 ConjunctsInUnsatCore, 24 InterpolantComputations, 9 PerfectInterpolantSequences, 3220/3909 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive - InvariantResult [Line: 654]: Loop Invariant Derived loop invariant: ((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && 1 <= switchedOnBeforeTS)) || (((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || 2 == \result) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || (((1 <= pumpRunning && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && \result <= 2) && \old(waterLevel) == waterLevel) && 2 <= \result) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || (((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((pumpRunning == 0 && waterLevel == \result) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || !(\old(waterLevel) <= 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == 0 && waterLevel == \result) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 140]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: ((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (waterLevel <= 0 && \old(waterLevel) == waterLevel)) || !(1 <= \old(pumpRunning))) || waterLevel == 0) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || ((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 622]: Loop Invariant Derived loop invariant: (((((!(waterLevel <= 0) || !(1 == systemActive)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS)) && ((((!(waterLevel == 1) || !(1 == systemActive)) || !(1 <= pumpRunning)) || \result == methaneLevelCritical) || !(1 <= switchedOnBeforeTS))) && ((((!(pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || waterLevel < 2) || \result == methaneLevelCritical) - InvariantResult [Line: 277]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && ((!(waterLevel == 0) && \result == 0) || (waterLevel == 0 && \result == 1)))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 232]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 222]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && 1 < waterLevel) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(waterLevel) <= 1) || pumpRunning == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && ((((((((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0) || (((pumpRunning == 0 && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((((pumpRunning == 0 && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && (((((((((pumpRunning == 0 && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 123]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 284]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 663]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && (((1 <= \result || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || ((pumpRunning == \old(pumpRunning) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) && ((!(waterLevel == 0) && \result == 0) || (waterLevel == 0 && \result == 1)))) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && 1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || (2 == \result && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || ((((pumpRunning == 0 && 2 == \result) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == 0 && 1 == systemActive)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && 1 == systemActive))) && ((((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && \old(waterLevel) <= waterLevel + 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) && waterLevel == 0)) || (((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && pumpRunning <= tmp___0) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (tmp___0 == 0 && \result == 0)) || !(1 == systemActive)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 154]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0)) || !(waterLevel <= 2)) - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (!(0 == tmp) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) RESULT: Ultimate proved your program to be correct! [2021-12-21 13:17:52,806 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE