./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 00:58:42,422 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 00:58:42,425 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 00:58:42,466 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 00:58:42,466 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 00:58:42,468 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 00:58:42,470 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 00:58:42,472 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 00:58:42,473 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 00:58:42,476 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 00:58:42,476 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 00:58:42,477 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 00:58:42,478 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 00:58:42,480 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 00:58:42,481 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 00:58:42,484 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 00:58:42,484 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 00:58:42,485 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 00:58:42,487 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 00:58:42,491 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 00:58:42,492 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 00:58:42,493 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 00:58:42,494 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 00:58:42,494 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 00:58:42,499 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 00:58:42,499 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 00:58:42,499 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 00:58:42,501 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 00:58:42,501 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 00:58:42,501 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 00:58:42,502 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 00:58:42,502 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 00:58:42,503 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 00:58:42,504 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 00:58:42,505 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 00:58:42,505 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 00:58:42,505 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 00:58:42,506 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 00:58:42,506 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 00:58:42,506 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 00:58:42,507 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 00:58:42,508 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 00:58:42,528 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 00:58:42,528 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 00:58:42,529 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 00:58:42,529 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 00:58:42,529 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 00:58:42,530 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 00:58:42,530 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 00:58:42,530 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 00:58:42,530 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 00:58:42,530 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 00:58:42,531 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 00:58:42,531 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 00:58:42,531 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 00:58:42,532 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 00:58:42,532 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 00:58:42,532 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 00:58:42,532 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 00:58:42,532 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 00:58:42,532 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 00:58:42,532 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 00:58:42,533 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 00:58:42,533 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 00:58:42,533 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 00:58:42,533 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 00:58:42,533 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:58:42,533 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 00:58:42,534 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 00:58:42,534 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 00:58:42,535 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 00:58:42,535 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 00:58:42,535 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 00:58:42,535 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 00:58:42,535 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 00:58:42,535 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 00:58:42,536 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 [2021-12-16 00:58:42,729 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 00:58:42,745 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 00:58:42,747 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 00:58:42,749 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 00:58:42,749 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 00:58:42,750 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2021-12-16 00:58:42,797 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2956b6733/b526bc9362a94eab9381630db4450231/FLAG75b0d83c3 [2021-12-16 00:58:43,231 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 00:58:43,232 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2021-12-16 00:58:43,248 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2956b6733/b526bc9362a94eab9381630db4450231/FLAG75b0d83c3 [2021-12-16 00:58:43,259 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2956b6733/b526bc9362a94eab9381630db4450231 [2021-12-16 00:58:43,261 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 00:58:43,263 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 00:58:43,265 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 00:58:43,265 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 00:58:43,267 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 00:58:43,268 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:58:43" (1/1) ... [2021-12-16 00:58:43,269 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@437322b2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:43, skipping insertion in model container [2021-12-16 00:58:43,269 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:58:43" (1/1) ... [2021-12-16 00:58:43,273 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 00:58:43,313 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 00:58:43,508 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2021-12-16 00:58:43,524 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:58:43,536 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 00:58:43,574 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2021-12-16 00:58:43,583 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:58:43,594 INFO L208 MainTranslator]: Completed translation [2021-12-16 00:58:43,595 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:43 WrapperNode [2021-12-16 00:58:43,595 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 00:58:43,596 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 00:58:43,596 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 00:58:43,596 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 00:58:43,602 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:43" (1/1) ... [2021-12-16 00:58:43,615 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:43" (1/1) ... [2021-12-16 00:58:43,649 INFO L137 Inliner]: procedures = 58, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 274 [2021-12-16 00:58:43,650 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 00:58:43,650 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 00:58:43,650 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 00:58:43,651 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 00:58:43,656 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:43" (1/1) ... [2021-12-16 00:58:43,656 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:43" (1/1) ... [2021-12-16 00:58:43,668 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:43" (1/1) ... [2021-12-16 00:58:43,668 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:43" (1/1) ... [2021-12-16 00:58:43,671 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:43" (1/1) ... [2021-12-16 00:58:43,674 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:43" (1/1) ... [2021-12-16 00:58:43,675 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:43" (1/1) ... [2021-12-16 00:58:43,676 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 00:58:43,677 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 00:58:43,677 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 00:58:43,677 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 00:58:43,687 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:43" (1/1) ... [2021-12-16 00:58:43,692 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:58:43,698 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:58:43,709 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 00:58:43,729 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 00:58:43,749 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 00:58:43,749 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 00:58:43,749 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 00:58:43,749 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-16 00:58:43,750 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-16 00:58:43,750 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 00:58:43,750 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 00:58:43,750 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 00:58:43,750 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 00:58:43,750 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:58:43,750 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:58:43,750 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 00:58:43,750 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 00:58:43,750 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-16 00:58:43,750 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-16 00:58:43,750 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 00:58:43,750 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 00:58:43,750 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 00:58:43,751 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 00:58:43,751 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 00:58:43,823 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 00:58:43,831 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 00:58:44,121 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 00:58:44,128 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 00:58:44,128 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 00:58:44,130 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:58:44 BoogieIcfgContainer [2021-12-16 00:58:44,130 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 00:58:44,132 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 00:58:44,133 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 00:58:44,135 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 00:58:44,136 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 12:58:43" (1/3) ... [2021-12-16 00:58:44,136 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@537eabdc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:58:44, skipping insertion in model container [2021-12-16 00:58:44,136 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:43" (2/3) ... [2021-12-16 00:58:44,137 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@537eabdc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:58:44, skipping insertion in model container [2021-12-16 00:58:44,137 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:58:44" (3/3) ... [2021-12-16 00:58:44,138 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product60.cil.c [2021-12-16 00:58:44,143 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 00:58:44,144 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 00:58:44,183 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 00:58:44,188 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 00:58:44,189 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 00:58:44,203 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-16 00:58:44,209 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2021-12-16 00:58:44,209 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:44,209 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:44,210 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:44,214 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:44,214 INFO L85 PathProgramCache]: Analyzing trace with hash 47908020, now seen corresponding path program 1 times [2021-12-16 00:58:44,219 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:44,220 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1919986565] [2021-12-16 00:58:44,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:44,220 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:44,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:44,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:58:44,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:44,394 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:44,395 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:44,395 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1919986565] [2021-12-16 00:58:44,395 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1919986565] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:44,395 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:44,396 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 00:58:44,397 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [196377896] [2021-12-16 00:58:44,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:44,400 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 00:58:44,400 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:44,425 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 00:58:44,427 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:58:44,432 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:44,459 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:44,459 INFO L93 Difference]: Finished difference Result 190 states and 257 transitions. [2021-12-16 00:58:44,461 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 00:58:44,462 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2021-12-16 00:58:44,462 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:44,468 INFO L225 Difference]: With dead ends: 190 [2021-12-16 00:58:44,468 INFO L226 Difference]: Without dead ends: 90 [2021-12-16 00:58:44,471 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:58:44,473 INFO L933 BasicCegarLoop]: 125 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:44,474 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:58:44,484 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2021-12-16 00:58:44,498 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2021-12-16 00:58:44,499 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 76 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-16 00:58:44,502 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 116 transitions. [2021-12-16 00:58:44,503 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 116 transitions. Word has length 23 [2021-12-16 00:58:44,503 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:44,503 INFO L470 AbstractCegarLoop]: Abstraction has 90 states and 116 transitions. [2021-12-16 00:58:44,503 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:44,503 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 116 transitions. [2021-12-16 00:58:44,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-12-16 00:58:44,505 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:44,505 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:44,505 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 00:58:44,505 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:44,506 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:44,506 INFO L85 PathProgramCache]: Analyzing trace with hash 776313737, now seen corresponding path program 1 times [2021-12-16 00:58:44,506 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:44,506 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [970966842] [2021-12-16 00:58:44,506 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:44,506 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:44,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:44,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 00:58:44,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:44,568 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:44,569 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:44,569 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [970966842] [2021-12-16 00:58:44,569 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [970966842] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:44,569 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:44,569 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:58:44,570 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1559220092] [2021-12-16 00:58:44,570 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:44,571 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:58:44,571 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:44,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:58:44,577 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:58:44,577 INFO L87 Difference]: Start difference. First operand 90 states and 116 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:44,590 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:44,590 INFO L93 Difference]: Finished difference Result 141 states and 181 transitions. [2021-12-16 00:58:44,590 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:58:44,590 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2021-12-16 00:58:44,591 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:44,591 INFO L225 Difference]: With dead ends: 141 [2021-12-16 00:58:44,592 INFO L226 Difference]: Without dead ends: 81 [2021-12-16 00:58:44,592 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:58:44,593 INFO L933 BasicCegarLoop]: 103 mSDtfsCounter, 17 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:44,593 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 184 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:58:44,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2021-12-16 00:58:44,599 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2021-12-16 00:58:44,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 70 states have internal predecessors, (82), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-16 00:58:44,604 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 104 transitions. [2021-12-16 00:58:44,607 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 104 transitions. Word has length 24 [2021-12-16 00:58:44,607 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:44,608 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 104 transitions. [2021-12-16 00:58:44,608 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:44,609 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 104 transitions. [2021-12-16 00:58:44,609 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2021-12-16 00:58:44,610 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:44,611 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:44,611 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 00:58:44,611 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:44,612 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:44,615 INFO L85 PathProgramCache]: Analyzing trace with hash -6644295, now seen corresponding path program 1 times [2021-12-16 00:58:44,615 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:44,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1753318092] [2021-12-16 00:58:44,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:44,616 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:44,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:44,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:58:44,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:44,674 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:44,675 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:44,675 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1753318092] [2021-12-16 00:58:44,675 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1753318092] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:44,675 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:44,676 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:58:44,676 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [104779050] [2021-12-16 00:58:44,676 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:44,677 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:58:44,677 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:44,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:58:44,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:58:44,678 INFO L87 Difference]: Start difference. First operand 81 states and 104 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:44,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:44,711 INFO L93 Difference]: Finished difference Result 227 states and 297 transitions. [2021-12-16 00:58:44,712 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:58:44,712 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2021-12-16 00:58:44,712 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:44,714 INFO L225 Difference]: With dead ends: 227 [2021-12-16 00:58:44,714 INFO L226 Difference]: Without dead ends: 153 [2021-12-16 00:58:44,714 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:58:44,715 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 96 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:44,716 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [96 Valid, 219 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:58:44,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153 states. [2021-12-16 00:58:44,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153 to 150. [2021-12-16 00:58:44,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 150 states, 113 states have (on average 1.345132743362832) internal successors, (152), 128 states have internal predecessors, (152), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2021-12-16 00:58:44,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 150 states and 196 transitions. [2021-12-16 00:58:44,735 INFO L78 Accepts]: Start accepts. Automaton has 150 states and 196 transitions. Word has length 29 [2021-12-16 00:58:44,736 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:44,736 INFO L470 AbstractCegarLoop]: Abstraction has 150 states and 196 transitions. [2021-12-16 00:58:44,736 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:44,736 INFO L276 IsEmpty]: Start isEmpty. Operand 150 states and 196 transitions. [2021-12-16 00:58:44,738 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-16 00:58:44,739 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:44,739 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:44,740 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 00:58:44,740 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:44,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:44,741 INFO L85 PathProgramCache]: Analyzing trace with hash -999312607, now seen corresponding path program 1 times [2021-12-16 00:58:44,741 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:44,741 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [625676871] [2021-12-16 00:58:44,741 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:44,741 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:44,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:44,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-16 00:58:44,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:44,812 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:44,812 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:44,813 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [625676871] [2021-12-16 00:58:44,813 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [625676871] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:44,813 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:44,813 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:58:44,813 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [273709899] [2021-12-16 00:58:44,813 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:44,814 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:58:44,815 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:44,815 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:58:44,815 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:58:44,816 INFO L87 Difference]: Start difference. First operand 150 states and 196 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:44,933 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:44,933 INFO L93 Difference]: Finished difference Result 436 states and 579 transitions. [2021-12-16 00:58:44,933 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:58:44,934 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2021-12-16 00:58:44,934 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:44,936 INFO L225 Difference]: With dead ends: 436 [2021-12-16 00:58:44,936 INFO L226 Difference]: Without dead ends: 293 [2021-12-16 00:58:44,937 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-16 00:58:44,938 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 75 mSDsluCounter, 397 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 509 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:44,938 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [78 Valid, 509 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:58:44,939 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 293 states. [2021-12-16 00:58:44,961 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 293 to 287. [2021-12-16 00:58:44,964 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 287 states, 214 states have (on average 1.3364485981308412) internal successors, (286), 243 states have internal predecessors, (286), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) [2021-12-16 00:58:44,966 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 287 states to 287 states and 376 transitions. [2021-12-16 00:58:44,966 INFO L78 Accepts]: Start accepts. Automaton has 287 states and 376 transitions. Word has length 32 [2021-12-16 00:58:44,966 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:44,966 INFO L470 AbstractCegarLoop]: Abstraction has 287 states and 376 transitions. [2021-12-16 00:58:44,967 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:44,967 INFO L276 IsEmpty]: Start isEmpty. Operand 287 states and 376 transitions. [2021-12-16 00:58:44,968 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2021-12-16 00:58:44,968 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:44,968 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:44,969 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 00:58:44,969 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:44,969 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:44,969 INFO L85 PathProgramCache]: Analyzing trace with hash -756738107, now seen corresponding path program 1 times [2021-12-16 00:58:44,970 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:44,970 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1191625635] [2021-12-16 00:58:44,970 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:44,970 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:44,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 00:58:45,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-16 00:58:45,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,029 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:45,030 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:45,030 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1191625635] [2021-12-16 00:58:45,032 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1191625635] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:45,033 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:45,033 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:58:45,033 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [931726036] [2021-12-16 00:58:45,033 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:45,035 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:58:45,035 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:45,035 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:58:45,036 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:58:45,038 INFO L87 Difference]: Start difference. First operand 287 states and 376 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 00:58:45,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:45,266 INFO L93 Difference]: Finished difference Result 745 states and 993 transitions. [2021-12-16 00:58:45,266 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:58:45,266 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 36 [2021-12-16 00:58:45,266 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:45,269 INFO L225 Difference]: With dead ends: 745 [2021-12-16 00:58:45,269 INFO L226 Difference]: Without dead ends: 465 [2021-12-16 00:58:45,274 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-16 00:58:45,275 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 126 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 211 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 245 SdHoareTripleChecker+Invalid, 254 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 211 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:45,275 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [131 Valid, 245 Invalid, 254 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 211 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:58:45,276 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 465 states. [2021-12-16 00:58:45,313 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 465 to 451. [2021-12-16 00:58:45,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 451 states, 338 states have (on average 1.2899408284023668) internal successors, (436), 371 states have internal predecessors, (436), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) [2021-12-16 00:58:45,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 451 states to 451 states and 576 transitions. [2021-12-16 00:58:45,316 INFO L78 Accepts]: Start accepts. Automaton has 451 states and 576 transitions. Word has length 36 [2021-12-16 00:58:45,317 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:45,317 INFO L470 AbstractCegarLoop]: Abstraction has 451 states and 576 transitions. [2021-12-16 00:58:45,317 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 00:58:45,317 INFO L276 IsEmpty]: Start isEmpty. Operand 451 states and 576 transitions. [2021-12-16 00:58:45,318 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-16 00:58:45,318 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:45,319 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:45,319 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 00:58:45,319 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:45,322 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:45,322 INFO L85 PathProgramCache]: Analyzing trace with hash -1441513323, now seen corresponding path program 1 times [2021-12-16 00:58:45,322 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:45,322 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [810313526] [2021-12-16 00:58:45,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:45,322 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:45,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 00:58:45,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:58:45,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:45,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-16 00:58:45,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,392 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:58:45,392 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:45,392 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [810313526] [2021-12-16 00:58:45,392 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [810313526] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:45,392 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:45,392 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:58:45,392 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1430168383] [2021-12-16 00:58:45,392 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:45,393 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:58:45,393 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:45,393 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:58:45,393 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:58:45,393 INFO L87 Difference]: Start difference. First operand 451 states and 576 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:58:45,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:45,621 INFO L93 Difference]: Finished difference Result 1009 states and 1320 transitions. [2021-12-16 00:58:45,621 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 00:58:45,621 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2021-12-16 00:58:45,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:45,624 INFO L225 Difference]: With dead ends: 1009 [2021-12-16 00:58:45,624 INFO L226 Difference]: Without dead ends: 565 [2021-12-16 00:58:45,626 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:58:45,626 INFO L933 BasicCegarLoop]: 86 mSDtfsCounter, 136 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 258 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 310 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 258 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:45,627 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [137 Valid, 254 Invalid, 310 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 258 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:58:45,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 565 states. [2021-12-16 00:58:45,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 565 to 543. [2021-12-16 00:58:45,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 543 states, 410 states have (on average 1.2536585365853659) internal successors, (514), 443 states have internal predecessors, (514), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2021-12-16 00:58:45,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 543 states to 543 states and 682 transitions. [2021-12-16 00:58:45,681 INFO L78 Accepts]: Start accepts. Automaton has 543 states and 682 transitions. Word has length 55 [2021-12-16 00:58:45,681 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:45,681 INFO L470 AbstractCegarLoop]: Abstraction has 543 states and 682 transitions. [2021-12-16 00:58:45,682 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:58:45,682 INFO L276 IsEmpty]: Start isEmpty. Operand 543 states and 682 transitions. [2021-12-16 00:58:45,683 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-16 00:58:45,683 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:45,683 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:45,683 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-16 00:58:45,684 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:45,685 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:45,685 INFO L85 PathProgramCache]: Analyzing trace with hash -1379473709, now seen corresponding path program 1 times [2021-12-16 00:58:45,685 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:45,685 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [906650634] [2021-12-16 00:58:45,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:45,685 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:45,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 00:58:45,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:58:45,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:45,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-16 00:58:45,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,759 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:58:45,760 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:45,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [906650634] [2021-12-16 00:58:45,760 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [906650634] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:45,761 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:45,761 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:58:45,761 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2116002976] [2021-12-16 00:58:45,761 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:45,761 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:58:45,761 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:45,762 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:58:45,762 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:58:45,762 INFO L87 Difference]: Start difference. First operand 543 states and 682 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:58:46,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:46,112 INFO L93 Difference]: Finished difference Result 1133 states and 1460 transitions. [2021-12-16 00:58:46,113 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-16 00:58:46,113 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2021-12-16 00:58:46,113 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:46,116 INFO L225 Difference]: With dead ends: 1133 [2021-12-16 00:58:46,116 INFO L226 Difference]: Without dead ends: 597 [2021-12-16 00:58:46,118 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=90, Invalid=182, Unknown=0, NotChecked=0, Total=272 [2021-12-16 00:58:46,122 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 366 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 352 mSolverCounterSat, 131 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 371 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 483 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 131 IncrementalHoareTripleChecker+Valid, 352 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:46,123 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [371 Valid, 282 Invalid, 483 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [131 Valid, 352 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:58:46,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 597 states. [2021-12-16 00:58:46,153 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 597 to 551. [2021-12-16 00:58:46,154 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 551 states, 418 states have (on average 1.2488038277511961) internal successors, (522), 451 states have internal predecessors, (522), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2021-12-16 00:58:46,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 551 states to 551 states and 690 transitions. [2021-12-16 00:58:46,158 INFO L78 Accepts]: Start accepts. Automaton has 551 states and 690 transitions. Word has length 55 [2021-12-16 00:58:46,159 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:46,159 INFO L470 AbstractCegarLoop]: Abstraction has 551 states and 690 transitions. [2021-12-16 00:58:46,159 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:58:46,159 INFO L276 IsEmpty]: Start isEmpty. Operand 551 states and 690 transitions. [2021-12-16 00:58:46,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-16 00:58:46,161 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:46,161 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:46,161 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-16 00:58:46,163 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:46,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:46,164 INFO L85 PathProgramCache]: Analyzing trace with hash -1888946799, now seen corresponding path program 1 times [2021-12-16 00:58:46,165 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:46,165 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1767000867] [2021-12-16 00:58:46,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:46,165 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:46,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 00:58:46,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:58:46,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:46,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-16 00:58:46,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,265 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:58:46,265 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:46,265 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1767000867] [2021-12-16 00:58:46,265 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1767000867] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:46,265 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:46,265 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:58:46,266 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [522915321] [2021-12-16 00:58:46,266 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:46,267 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:58:46,267 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:46,267 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:58:46,267 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:58:46,268 INFO L87 Difference]: Start difference. First operand 551 states and 690 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 00:58:46,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:46,516 INFO L93 Difference]: Finished difference Result 1587 states and 2068 transitions. [2021-12-16 00:58:46,517 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-16 00:58:46,517 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2021-12-16 00:58:46,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:46,521 INFO L225 Difference]: With dead ends: 1587 [2021-12-16 00:58:46,521 INFO L226 Difference]: Without dead ends: 1043 [2021-12-16 00:58:46,523 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:58:46,523 INFO L933 BasicCegarLoop]: 136 mSDtfsCounter, 321 mSDsluCounter, 143 mSDsCounter, 0 mSdLazyCounter, 248 mSolverCounterSat, 126 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 324 SdHoareTripleChecker+Valid, 279 SdHoareTripleChecker+Invalid, 374 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 126 IncrementalHoareTripleChecker+Valid, 248 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:46,523 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [324 Valid, 279 Invalid, 374 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [126 Valid, 248 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:58:46,524 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1043 states. [2021-12-16 00:58:46,568 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1043 to 1031. [2021-12-16 00:58:46,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1031 states, 778 states have (on average 1.2210796915167095) internal successors, (950), 829 states have internal predecessors, (950), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) [2021-12-16 00:58:46,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1031 states to 1031 states and 1296 transitions. [2021-12-16 00:58:46,574 INFO L78 Accepts]: Start accepts. Automaton has 1031 states and 1296 transitions. Word has length 55 [2021-12-16 00:58:46,575 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:46,576 INFO L470 AbstractCegarLoop]: Abstraction has 1031 states and 1296 transitions. [2021-12-16 00:58:46,576 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 00:58:46,576 INFO L276 IsEmpty]: Start isEmpty. Operand 1031 states and 1296 transitions. [2021-12-16 00:58:46,578 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-12-16 00:58:46,578 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:46,579 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:46,579 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-16 00:58:46,579 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:46,579 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:46,580 INFO L85 PathProgramCache]: Analyzing trace with hash 625238315, now seen corresponding path program 1 times [2021-12-16 00:58:46,580 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:46,580 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1991163019] [2021-12-16 00:58:46,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:46,580 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:46,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,626 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 00:58:46,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-16 00:58:46,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 00:58:46,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:46,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-16 00:58:46,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,695 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-16 00:58:46,696 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:46,696 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1991163019] [2021-12-16 00:58:46,696 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1991163019] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:58:46,696 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1792967509] [2021-12-16 00:58:46,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:46,696 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:58:46,697 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:58:46,698 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:58:46,719 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 00:58:46,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,794 INFO L263 TraceCheckSpWp]: Trace formula consists of 378 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-16 00:58:46,799 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:58:47,002 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:47,002 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:58:47,002 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1792967509] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:47,002 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:58:47,002 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [13] total 18 [2021-12-16 00:58:47,003 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1909869406] [2021-12-16 00:58:47,003 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:47,003 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:58:47,003 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:47,003 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:58:47,003 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=262, Unknown=0, NotChecked=0, Total=306 [2021-12-16 00:58:47,004 INFO L87 Difference]: Start difference. First operand 1031 states and 1296 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-16 00:58:47,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:47,108 INFO L93 Difference]: Finished difference Result 2013 states and 2543 transitions. [2021-12-16 00:58:47,109 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:58:47,109 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 59 [2021-12-16 00:58:47,110 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:47,114 INFO L225 Difference]: With dead ends: 2013 [2021-12-16 00:58:47,114 INFO L226 Difference]: Without dead ends: 989 [2021-12-16 00:58:47,116 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2021-12-16 00:58:47,118 INFO L933 BasicCegarLoop]: 189 mSDtfsCounter, 75 mSDsluCounter, 450 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 639 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:47,118 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 639 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:58:47,120 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 989 states. [2021-12-16 00:58:47,167 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 989 to 985. [2021-12-16 00:58:47,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 985 states, 742 states have (on average 1.2075471698113207) internal successors, (896), 791 states have internal predecessors, (896), 126 states have call successors, (126), 114 states have call predecessors, (126), 116 states have return successors, (188), 122 states have call predecessors, (188), 126 states have call successors, (188) [2021-12-16 00:58:47,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 985 states to 985 states and 1210 transitions. [2021-12-16 00:58:47,172 INFO L78 Accepts]: Start accepts. Automaton has 985 states and 1210 transitions. Word has length 59 [2021-12-16 00:58:47,172 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:47,173 INFO L470 AbstractCegarLoop]: Abstraction has 985 states and 1210 transitions. [2021-12-16 00:58:47,173 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-16 00:58:47,173 INFO L276 IsEmpty]: Start isEmpty. Operand 985 states and 1210 transitions. [2021-12-16 00:58:47,175 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2021-12-16 00:58:47,175 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:47,175 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:47,195 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-16 00:58:47,391 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:58:47,392 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:47,392 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:47,392 INFO L85 PathProgramCache]: Analyzing trace with hash 1921806068, now seen corresponding path program 1 times [2021-12-16 00:58:47,392 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:47,392 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1860290227] [2021-12-16 00:58:47,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:47,392 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:47,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 00:58:47,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-16 00:58:47,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:58:47,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:47,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:58:47,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-12-16 00:58:47,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2021-12-16 00:58:47,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,470 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-16 00:58:47,470 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:47,470 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1860290227] [2021-12-16 00:58:47,470 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1860290227] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:47,470 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:47,470 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-16 00:58:47,470 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1347196338] [2021-12-16 00:58:47,470 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:47,471 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 00:58:47,471 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:47,471 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 00:58:47,471 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-16 00:58:47,471 INFO L87 Difference]: Start difference. First operand 985 states and 1210 transitions. Second operand has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-16 00:58:47,716 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:47,717 INFO L93 Difference]: Finished difference Result 1800 states and 2215 transitions. [2021-12-16 00:58:47,717 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-16 00:58:47,717 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 86 [2021-12-16 00:58:47,717 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:47,720 INFO L225 Difference]: With dead ends: 1800 [2021-12-16 00:58:47,720 INFO L226 Difference]: Without dead ends: 822 [2021-12-16 00:58:47,723 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2021-12-16 00:58:47,723 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 404 mSDsluCounter, 154 mSDsCounter, 0 mSdLazyCounter, 273 mSolverCounterSat, 163 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 413 SdHoareTripleChecker+Valid, 281 SdHoareTripleChecker+Invalid, 436 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 163 IncrementalHoareTripleChecker+Valid, 273 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:47,723 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [413 Valid, 281 Invalid, 436 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [163 Valid, 273 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:58:47,724 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 822 states. [2021-12-16 00:58:47,749 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 822 to 790. [2021-12-16 00:58:47,750 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 596 states have (on average 1.1895973154362416) internal successors, (709), 642 states have internal predecessors, (709), 101 states have call successors, (101), 82 states have call predecessors, (101), 92 states have return successors, (150), 99 states have call predecessors, (150), 101 states have call successors, (150) [2021-12-16 00:58:47,767 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 960 transitions. [2021-12-16 00:58:47,768 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 960 transitions. Word has length 86 [2021-12-16 00:58:47,768 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:47,768 INFO L470 AbstractCegarLoop]: Abstraction has 790 states and 960 transitions. [2021-12-16 00:58:47,768 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-16 00:58:47,768 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 960 transitions. [2021-12-16 00:58:47,769 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-12-16 00:58:47,769 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:47,770 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:47,770 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-16 00:58:47,770 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:47,770 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:47,770 INFO L85 PathProgramCache]: Analyzing trace with hash 1670948605, now seen corresponding path program 1 times [2021-12-16 00:58:47,770 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:47,770 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [712274305] [2021-12-16 00:58:47,770 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:47,771 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:47,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 00:58:47,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:58:47,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:58:47,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:47,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:58:47,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-16 00:58:47,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-16 00:58:47,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:58:47,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-12-16 00:58:47,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,906 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-16 00:58:47,906 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:47,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [712274305] [2021-12-16 00:58:47,907 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [712274305] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:58:47,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [641252025] [2021-12-16 00:58:47,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:47,907 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:58:47,907 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:58:47,908 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:58:47,918 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-16 00:58:47,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,993 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 11 conjunts are in the unsatisfiable core [2021-12-16 00:58:47,996 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:58:48,139 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:58:48,139 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:58:48,139 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [641252025] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:48,139 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:58:48,139 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 10 [2021-12-16 00:58:48,140 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [682962382] [2021-12-16 00:58:48,140 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:48,140 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:58:48,140 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:48,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:58:48,140 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-16 00:58:48,140 INFO L87 Difference]: Start difference. First operand 790 states and 960 transitions. Second operand has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-16 00:58:48,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:48,280 INFO L93 Difference]: Finished difference Result 2049 states and 2607 transitions. [2021-12-16 00:58:48,280 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 00:58:48,281 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 98 [2021-12-16 00:58:48,281 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:48,286 INFO L225 Difference]: With dead ends: 2049 [2021-12-16 00:58:48,286 INFO L226 Difference]: Without dead ends: 1430 [2021-12-16 00:58:48,288 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 112 SyntacticMatches, 4 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2021-12-16 00:58:48,289 INFO L933 BasicCegarLoop]: 203 mSDtfsCounter, 187 mSDsluCounter, 548 mSDsCounter, 0 mSdLazyCounter, 63 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 751 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 63 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:48,289 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [190 Valid, 751 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 63 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:58:48,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1430 states. [2021-12-16 00:58:48,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1430 to 1178. [2021-12-16 00:58:48,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1178 states, 886 states have (on average 1.1884875846501128) internal successors, (1053), 954 states have internal predecessors, (1053), 154 states have call successors, (154), 116 states have call predecessors, (154), 137 states have return successors, (255), 149 states have call predecessors, (255), 154 states have call successors, (255) [2021-12-16 00:58:48,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1178 states to 1178 states and 1462 transitions. [2021-12-16 00:58:48,350 INFO L78 Accepts]: Start accepts. Automaton has 1178 states and 1462 transitions. Word has length 98 [2021-12-16 00:58:48,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:48,351 INFO L470 AbstractCegarLoop]: Abstraction has 1178 states and 1462 transitions. [2021-12-16 00:58:48,351 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-16 00:58:48,351 INFO L276 IsEmpty]: Start isEmpty. Operand 1178 states and 1462 transitions. [2021-12-16 00:58:48,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-12-16 00:58:48,353 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:48,353 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:48,372 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-16 00:58:48,566 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-16 00:58:48,566 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:48,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:48,567 INFO L85 PathProgramCache]: Analyzing trace with hash -134489729, now seen corresponding path program 1 times [2021-12-16 00:58:48,567 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:48,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [136109180] [2021-12-16 00:58:48,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:48,567 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:48,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 00:58:48,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:58:48,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:58:48,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:48,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:58:48,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-16 00:58:48,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-16 00:58:48,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:58:48,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-12-16 00:58:48,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,639 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2021-12-16 00:58:48,640 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:48,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [136109180] [2021-12-16 00:58:48,640 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [136109180] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:58:48,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1382391572] [2021-12-16 00:58:48,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:48,640 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:58:48,641 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:58:48,644 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:58:48,649 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-16 00:58:48,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,757 INFO L263 TraceCheckSpWp]: Trace formula consists of 473 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-16 00:58:48,759 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:58:48,874 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-12-16 00:58:48,875 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:58:48,875 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1382391572] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:48,875 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:58:48,875 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2021-12-16 00:58:48,875 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1877948929] [2021-12-16 00:58:48,875 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:48,875 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 00:58:48,875 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:48,876 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 00:58:48,876 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2021-12-16 00:58:48,876 INFO L87 Difference]: Start difference. First operand 1178 states and 1462 transitions. Second operand has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-16 00:58:48,915 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:48,915 INFO L93 Difference]: Finished difference Result 1663 states and 2045 transitions. [2021-12-16 00:58:48,915 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 00:58:48,915 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2021-12-16 00:58:48,915 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:48,916 INFO L225 Difference]: With dead ends: 1663 [2021-12-16 00:58:48,916 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 00:58:48,919 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 125 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=43, Invalid=167, Unknown=0, NotChecked=0, Total=210 [2021-12-16 00:58:48,919 INFO L933 BasicCegarLoop]: 103 mSDtfsCounter, 33 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 375 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:48,919 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [33 Valid, 375 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:58:48,920 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 00:58:48,920 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 00:58:48,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 00:58:48,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 00:58:48,920 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 98 [2021-12-16 00:58:48,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:48,920 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 00:58:48,920 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-16 00:58:48,920 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 00:58:48,920 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 00:58:48,922 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 00:58:48,951 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-16 00:58:49,123 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:58:49,124 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 00:58:53,015 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 851 858) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse3) (or .cse5 .cse6 .cse4 .cse1) (or .cse5 .cse6 .cse1 .cse2))) [2021-12-16 00:58:53,015 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 851 858) no Hoare annotation was computed. [2021-12-16 00:58:53,015 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 851 858) no Hoare annotation was computed. [2021-12-16 00:58:53,015 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 766 772) no Hoare annotation was computed. [2021-12-16 00:58:53,015 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 766 772) the Hoare annotation is: true [2021-12-16 00:58:53,015 INFO L858 garLoopResultBuilder]: For program point L190-1(lines 186 197) no Hoare annotation was computed. [2021-12-16 00:58:53,015 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 186 197) the Hoare annotation is: (let ((.cse1 (not (= ~waterLevel~0 1))) (.cse6 (not (<= 2 ~waterLevel~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= ~pumpRunning~0 0))) (.cse7 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse9 (not (<= 1 ~waterLevel~0))) (.cse8 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse4 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse3 .cse6) (or .cse0 .cse2 .cse3 .cse6 .cse4) (or .cse1 .cse2 .cse5 .cse7 .cse8) (or .cse2 .cse5 .cse7 .cse8 .cse6) (or .cse0 .cse2 .cse5 .cse9 .cse3) (or .cse2 .cse7 .cse9 .cse8 .cse4))) [2021-12-16 00:58:53,015 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 186 197) no Hoare annotation was computed. [2021-12-16 00:58:53,015 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 198 206) the Hoare annotation is: true [2021-12-16 00:58:53,015 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 198 206) no Hoare annotation was computed. [2021-12-16 00:58:53,015 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 198 206) no Hoare annotation was computed. [2021-12-16 00:58:53,016 INFO L854 garLoopResultBuilder]: At program point L271(line 271) the Hoare annotation is: (let ((.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse11 (= ~pumpRunning~0 0))) (let ((.cse7 (not (<= 1 |old(~waterLevel~0)|))) (.cse9 (not (= ~systemActive~0 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (and (<= 1 ~waterLevel~0) .cse11)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse4 .cse11)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse8 .cse5 .cse6 .cse9) (or .cse10 .cse8 .cse5 .cse6 .cse9) (or .cse8 .cse3 .cse5 .cse7 .cse9) (or .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse6) (or .cse10 .cse2 .cse5 .cse6 .cse11) (or .cse10 .cse8 .cse2 .cse3 .cse5)))) [2021-12-16 00:58:53,016 INFO L858 garLoopResultBuilder]: For program point L271-1(line 271) no Hoare annotation was computed. [2021-12-16 00:58:53,016 INFO L858 garLoopResultBuilder]: For program point L746-1(lines 745 764) no Hoare annotation was computed. [2021-12-16 00:58:53,016 INFO L858 garLoopResultBuilder]: For program point L808(lines 808 816) no Hoare annotation was computed. [2021-12-16 00:58:53,016 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 742 765) no Hoare annotation was computed. [2021-12-16 00:58:53,016 INFO L858 garLoopResultBuilder]: For program point L804(lines 804 821) no Hoare annotation was computed. [2021-12-16 00:58:53,016 INFO L854 garLoopResultBuilder]: At program point L949(lines 934 952) the Hoare annotation is: (let ((.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= 1 ~systemActive~0))) (.cse7 (and (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 0 |timeShift_isLowWaterSensorDry_#res#1|) (<= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0) (< 0 (+ |timeShift_isLowWaterLevel_~tmp~10#1| 1)))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7) (or .cse5 .cse0 .cse1 .cse2) (or .cse5 .cse6 .cse0 .cse2) (or .cse4 .cse5 .cse7 .cse1) (or .cse6 .cse0 .cse2 .cse3))) [2021-12-16 00:58:53,016 INFO L854 garLoopResultBuilder]: At program point L875(lines 870 878) the Hoare annotation is: (let ((.cse8 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (and .cse8 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse9)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~systemActive~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse3 .cse5 .cse4 .cse6) (or .cse0 .cse3 .cse5 .cse4) (or .cse7 .cse0 .cse5) (or .cse1 .cse2 .cse3 .cse4 .cse6) (or .cse7 (and .cse8 (<= 1 ~waterLevel~0) .cse9) .cse0 .cse1)))) [2021-12-16 00:58:53,016 INFO L858 garLoopResultBuilder]: For program point L277(lines 277 283) no Hoare annotation was computed. [2021-12-16 00:58:53,016 INFO L858 garLoopResultBuilder]: For program point L661(line 661) no Hoare annotation was computed. [2021-12-16 00:58:53,016 INFO L858 garLoopResultBuilder]: For program point L273(lines 273 286) no Hoare annotation was computed. [2021-12-16 00:58:53,016 INFO L854 garLoopResultBuilder]: At program point L273-1(lines 265 289) the Hoare annotation is: (let ((.cse5 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse9 (and .cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 1 |old(~waterLevel~0)|))) (.cse10 (not (= ~systemActive~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= 1 ~systemActive~0))) (.cse11 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~1#1| 0)) (.cse1 (<= 1 ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4) (or .cse3 .cse5 .cse6 .cse7 .cse8) (or .cse9 .cse3 .cse4 .cse6 .cse8) (or .cse9 .cse4 .cse6 .cse8 .cse10) (or (and .cse11 .cse5 .cse2) .cse6 .cse7 .cse8 .cse10) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse6 .cse7 (and .cse11 .cse2)) (or .cse0 (and .cse11 (<= 2 ~waterLevel~0)) .cse3 (and .cse11 .cse1 .cse2) .cse7)))) [2021-12-16 00:58:53,016 INFO L854 garLoopResultBuilder]: At program point L814(line 814) the Hoare annotation is: (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2) (or .cse5 .cse4 .cse6) (or .cse5 .cse4 .cse1) (or .cse4 .cse6 .cse0 .cse2) (or .cse6 .cse0 .cse2 .cse3))) [2021-12-16 00:58:53,017 INFO L854 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= 1 ~systemActive~0))) (.cse6 (and (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 0 |timeShift_isLowWaterSensorDry_#res#1|) (<= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0) (< 0 (+ |timeShift_isLowWaterLevel_~tmp~10#1| 1)) (<= 1 |timeShift_processEnvironment_~tmp~7#1|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse1) (or .cse5 .cse0 .cse1 .cse2) (or .cse5 .cse7 .cse0 .cse2) (or .cse7 .cse0 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7))) [2021-12-16 00:58:53,017 INFO L858 garLoopResultBuilder]: For program point L166(lines 166 170) no Hoare annotation was computed. [2021-12-16 00:58:53,017 INFO L854 garLoopResultBuilder]: At program point L166-2(lines 162 173) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse3 .cse5 .cse6) (or .cse1 .cse4 .cse3 .cse5) (or .cse1 .cse7 .cse4 .cse5) (or .cse0 .cse1 .cse7 .cse2) (or .cse7 .cse4 .cse5 .cse6))) [2021-12-16 00:58:53,017 INFO L854 garLoopResultBuilder]: At program point L662(lines 657 664) the Hoare annotation is: (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2) (or .cse5 .cse4 .cse6) (or .cse5 .cse4 .cse1) (or .cse4 .cse6 .cse0 .cse2) (or .cse6 .cse0 .cse2 .cse3))) [2021-12-16 00:58:53,017 INFO L854 garLoopResultBuilder]: At program point L819(line 819) the Hoare annotation is: (let ((.cse9 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse6 (= ~pumpRunning~0 0))) (let ((.cse3 (not (= ~systemActive~0 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse10 (and .cse9 .cse6)) (.cse7 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 (and .cse5 .cse6) .cse7 .cse1) (or .cse8 .cse0 .cse2 .cse3) (or .cse4 .cse7 .cse8 (and .cse9 .cse5 .cse6)) (or .cse10 .cse7 .cse0 .cse1 .cse2) (or (not (= |old(~waterLevel~0)| 1)) .cse10 .cse7 .cse8 .cse0)))) [2021-12-16 00:58:53,017 INFO L854 garLoopResultBuilder]: At program point L819-1(lines 800 824) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0))) (let ((.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (and (<= 1 ~waterLevel~0) .cse10)) (.cse6 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~systemActive~0 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7) (or .cse2 .cse8 .cse4 .cse5 .cse6) (or .cse0 .cse2 .cse3 .cse8 .cse4) (or .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse5) (or .cse3 .cse4 .cse6 .cse7) (or .cse9 .cse2 .cse4 .cse5 .cse10) (or .cse9 (and .cse8 .cse10) .cse2 .cse3 .cse4)))) [2021-12-16 00:58:53,017 INFO L858 garLoopResultBuilder]: For program point L753-1(lines 753 759) no Hoare annotation was computed. [2021-12-16 00:58:53,017 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 742 765) the Hoare annotation is: (let ((.cse10 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse7 (not (= ~systemActive~0 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (and .cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (<= 1 |old(~waterLevel~0)|))) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse4 (and .cse10 (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse6 .cse7) (or .cse8 .cse4 .cse5 .cse6 .cse7) (or .cse4 .cse3 .cse5 .cse9 .cse7) (or .cse0 .cse1 .cse2 .cse6) (or .cse4 .cse2 .cse5 .cse6 .cse9) (or .cse8 .cse4 .cse2 .cse3 .cse5)))) [2021-12-16 00:58:53,017 INFO L858 garLoopResultBuilder]: For program point L943(lines 943 947) no Hoare annotation was computed. [2021-12-16 00:58:53,017 INFO L858 garLoopResultBuilder]: For program point L943-2(lines 943 947) no Hoare annotation was computed. [2021-12-16 00:58:53,017 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 742 765) no Hoare annotation was computed. [2021-12-16 00:58:53,017 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 661) no Hoare annotation was computed. [2021-12-16 00:58:53,018 INFO L854 garLoopResultBuilder]: At program point L258(lines 253 261) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (and (<= 0 |timeShift_isLowWaterSensorDry_#res#1|) (<= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2) (or .cse5 .cse4 .cse1 .cse6) (or .cse4 .cse7 .cse0 .cse2) (or .cse7 .cse0 .cse2 .cse3) (or .cse5 .cse4 .cse7 .cse6))) [2021-12-16 00:58:53,018 INFO L861 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2021-12-16 00:58:53,018 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2021-12-16 00:58:53,018 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2021-12-16 00:58:53,018 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2021-12-16 00:58:53,018 INFO L861 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2021-12-16 00:58:53,018 INFO L861 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2021-12-16 00:58:53,018 INFO L858 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2021-12-16 00:58:53,018 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2021-12-16 00:58:53,018 INFO L858 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2021-12-16 00:58:53,018 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-12-16 00:58:53,018 INFO L854 garLoopResultBuilder]: At program point L700(line 700) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0 1)) (.cse1 (= ~systemActive~0 0)) (.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse5 (<= 1 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse7 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse7 .cse4) (and .cse0 .cse8 .cse2 .cse7 .cse4) (and .cse0 .cse8 .cse1 .cse2 .cse4) (and .cse0 .cse1 .cse6 .cse5 .cse4) (and .cse0 .cse2 .cse3 .cse7))) [2021-12-16 00:58:53,018 INFO L854 garLoopResultBuilder]: At program point L725(lines 678 727) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0 1)) (.cse1 (= ~systemActive~0 0)) (.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse5 (<= 1 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse7 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse7 .cse4) (and .cse0 .cse8 .cse2 .cse7 .cse4) (and .cse0 .cse8 .cse1 .cse2 .cse4) (and .cse0 .cse1 .cse6 .cse5 .cse4) (and .cse0 .cse2 .cse3 .cse7))) [2021-12-16 00:58:53,018 INFO L858 garLoopResultBuilder]: For program point L688(lines 688 694) no Hoare annotation was computed. [2021-12-16 00:58:53,018 INFO L858 garLoopResultBuilder]: For program point L688-1(lines 688 694) no Hoare annotation was computed. [2021-12-16 00:58:53,018 INFO L854 garLoopResultBuilder]: At program point L973(lines 968 975) the Hoare annotation is: (let ((.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse3 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 (<= 1 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse0 (= ~waterLevel~0 1) .cse5 .cse3 .cse4) (and .cse0 .cse5 .cse1 .cse3))) [2021-12-16 00:58:53,018 INFO L858 garLoopResultBuilder]: For program point L680(lines 680 684) no Hoare annotation was computed. [2021-12-16 00:58:53,019 INFO L854 garLoopResultBuilder]: At program point L965(lines 953 967) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 0)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3) (and .cse0 (= ~waterLevel~0 1) .cse1 .cse2 .cse3) (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) (<= 1 ~waterLevel~0) .cse3))) [2021-12-16 00:58:53,019 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 00:58:53,019 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 00:58:53,019 INFO L858 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2021-12-16 00:58:53,019 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 00:58:53,019 INFO L858 garLoopResultBuilder]: For program point L957-1(lines 957 963) no Hoare annotation was computed. [2021-12-16 00:58:53,019 INFO L854 garLoopResultBuilder]: At program point L1007(lines 1002 1010) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:58:53,019 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2021-12-16 00:58:53,019 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2021-12-16 00:58:53,019 INFO L854 garLoopResultBuilder]: At program point L999(lines 995 1001) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:58:53,019 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 00:58:53,019 INFO L861 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2021-12-16 00:58:53,019 INFO L861 garLoopResultBuilder]: At program point L731(lines 668 735) the Hoare annotation is: true [2021-12-16 00:58:53,019 INFO L858 garLoopResultBuilder]: For program point L698(lines 698 704) no Hoare annotation was computed. [2021-12-16 00:58:53,019 INFO L858 garLoopResultBuilder]: For program point L698-1(lines 698 704) no Hoare annotation was computed. [2021-12-16 00:58:53,019 INFO L861 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2021-12-16 00:58:53,019 INFO L854 garLoopResultBuilder]: At program point L690(line 690) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0 1)) (.cse1 (= ~systemActive~0 0)) (.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse5 (<= 1 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse7 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse7 .cse4) (and .cse0 .cse8 .cse2 .cse7 .cse4) (and .cse0 .cse8 .cse1 .cse2 .cse4) (and .cse0 .cse1 .cse6 .cse5 .cse4) (and .cse0 .cse2 .cse3 .cse7))) [2021-12-16 00:58:53,019 INFO L854 garLoopResultBuilder]: At program point L992(lines 988 994) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:58:53,020 INFO L854 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2021-12-16 00:58:53,020 INFO L854 garLoopResultBuilder]: At program point L728(lines 677 729) the Hoare annotation is: false [2021-12-16 00:58:53,020 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:58:53,020 INFO L858 garLoopResultBuilder]: For program point L716(lines 716 722) no Hoare annotation was computed. [2021-12-16 00:58:53,020 INFO L854 garLoopResultBuilder]: At program point L716-2(lines 708 723) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0 1)) (.cse4 (= ~systemActive~0 0)) (.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse3 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse1 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse6) (and .cse0 .cse8 .cse5 .cse3 .cse6) (and .cse0 .cse8 .cse4 .cse5 .cse6) (and .cse0 .cse4 .cse2 .cse7 .cse6) (and .cse0 .cse5 .cse1 .cse3))) [2021-12-16 00:58:53,020 INFO L858 garLoopResultBuilder]: For program point L679(lines 678 727) no Hoare annotation was computed. [2021-12-16 00:58:53,020 INFO L858 garLoopResultBuilder]: For program point L708(lines 708 723) no Hoare annotation was computed. [2021-12-16 00:58:53,020 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 774 798) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 (not (<= 1 ~waterLevel~0)) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse0 .cse3 .cse1 .cse2) (or .cse0 .cse3 .cse1 (not (<= 2 ~waterLevel~0)) .cse2))) [2021-12-16 00:58:53,020 INFO L854 garLoopResultBuilder]: At program point L830(lines 825 832) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2021-12-16 00:58:53,020 INFO L854 garLoopResultBuilder]: At program point L793(line 793) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0))))) [2021-12-16 00:58:53,020 INFO L854 garLoopResultBuilder]: At program point L248(lines 239 252) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~waterLevel~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or (and (<= 2 ~waterLevel~0) .cse0) (and .cse1 .cse0) .cse2 .cse3 .cse4 (not (= ~methaneLevelCritical~0 0))) (or .cse2 .cse3 .cse5 .cse4 .cse0) (or .cse1 (not (= ~waterLevel~0 1)) .cse2 .cse5 .cse4))) [2021-12-16 00:58:53,020 INFO L858 garLoopResultBuilder]: For program point L793-1(lines 774 798) no Hoare annotation was computed. [2021-12-16 00:58:53,020 INFO L858 garLoopResultBuilder]: For program point L841(lines 841 847) no Hoare annotation was computed. [2021-12-16 00:58:53,020 INFO L854 garLoopResultBuilder]: At program point L841-2(lines 834 850) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0))) (or .cse0 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~8#1|) .cse3 (= ~pumpRunning~0 0)) .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2021-12-16 00:58:53,021 INFO L854 garLoopResultBuilder]: At program point L930(lines 915 933) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0))) (let ((.cse1 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (not (= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1|)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) .cse6)) (.cse0 (and .cse5 .cse6)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~waterLevel~0)) (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse1 (not (= ~waterLevel~0 1)) .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse4 (not .cse5))))) [2021-12-16 00:58:53,021 INFO L854 garLoopResultBuilder]: At program point L866(lines 859 869) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~waterLevel~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= ~pumpRunning~0 0))) (and (or (and .cse0 .cse1) .cse2 .cse3 .cse4 (not (= ~methaneLevelCritical~0 0))) (or .cse2 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) .cse0 .cse1)))) [2021-12-16 00:58:53,021 INFO L854 garLoopResultBuilder]: At program point L864(line 864) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0))) (let ((.cse3 (and .cse4 (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse3 .cse0 (not (<= 1 ~waterLevel~0)) .cse2 (not (= ~methaneLevelCritical~0 0))) (or .cse3 .cse0 .cse1 .cse2 (not .cse4))))) [2021-12-16 00:58:53,021 INFO L858 garLoopResultBuilder]: For program point L864-1(line 864) no Hoare annotation was computed. [2021-12-16 00:58:53,021 INFO L858 garLoopResultBuilder]: For program point L924(lines 924 928) no Hoare annotation was computed. [2021-12-16 00:58:53,021 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 774 798) no Hoare annotation was computed. [2021-12-16 00:58:53,021 INFO L858 garLoopResultBuilder]: For program point L924-2(lines 924 928) no Hoare annotation was computed. [2021-12-16 00:58:53,021 INFO L854 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (let ((.cse0 (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0))))) [2021-12-16 00:58:53,021 INFO L858 garLoopResultBuilder]: For program point L243(lines 243 249) no Hoare annotation was computed. [2021-12-16 00:58:53,021 INFO L858 garLoopResultBuilder]: For program point L782(lines 782 790) no Hoare annotation was computed. [2021-12-16 00:58:53,021 INFO L858 garLoopResultBuilder]: For program point L778(lines 778 795) no Hoare annotation was computed. [2021-12-16 00:58:53,021 INFO L858 garLoopResultBuilder]: For program point L178-1(lines 174 185) no Hoare annotation was computed. [2021-12-16 00:58:53,021 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 174 185) no Hoare annotation was computed. [2021-12-16 00:58:53,021 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 174 185) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= ~systemActive~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse3 .cse6) (or .cse7 .cse1 .cse2 .cse3) (or .cse0 .cse8 .cse2 .cse4 .cse6) (or .cse5 .cse0 .cse1 .cse8 .cse2) (or .cse7 .cse0 .cse2 .cse3 .cse6) (or .cse7 .cse0 .cse1 .cse8 .cse2))) [2021-12-16 00:58:53,025 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:53,026 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 00:58:53,057 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 12:58:53 BoogieIcfgContainer [2021-12-16 00:58:53,057 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 00:58:53,058 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 00:58:53,058 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 00:58:53,058 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 00:58:53,059 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:58:44" (3/4) ... [2021-12-16 00:58:53,061 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 00:58:53,064 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-16 00:58:53,065 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 00:58:53,065 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 00:58:53,065 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-16 00:58:53,065 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 00:58:53,065 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 00:58:53,065 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:58:53,065 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 00:58:53,071 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-16 00:58:53,071 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 00:58:53,072 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 00:58:53,072 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 00:58:53,072 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 00:58:53,073 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:58:53,073 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:58:53,088 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) [2021-12-16 00:58:53,089 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((!(1 == systemActive) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && ((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || pumpRunning == 0)) && ((((!(\old(waterLevel) == 1) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) [2021-12-16 00:58:53,089 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((!(1 == systemActive) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((((tmp == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0))) && ((((!(2 <= \old(waterLevel)) || (tmp == 0 && 2 <= waterLevel)) || !(1 == systemActive)) || ((tmp == 0 && 1 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) [2021-12-16 00:58:53,090 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((methaneLevelCritical <= \result && 2 <= waterLevel) && pumpRunning == 0)) [2021-12-16 00:58:53,090 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || ((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && ((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 <= methaneLevelCritical) || ((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(2 <= \old(waterLevel)) || ((\result == 0 && 1 <= waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) [2021-12-16 00:58:53,090 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((0 <= \result && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((0 <= \result && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel)) [2021-12-16 00:58:53,090 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || (((methaneLevelCritical <= \result && methaneLevelCritical <= tmp) && 2 <= waterLevel) && pumpRunning == 0)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) [2021-12-16 00:58:53,090 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((2 <= waterLevel && pumpRunning == 0) || (!(\result == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0)) && ((((!(\result == 0) || !(waterLevel == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) [2021-12-16 00:58:53,091 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) [2021-12-16 00:58:53,091 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && ((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) [2021-12-16 00:58:53,091 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((((1 <= tmp___0 && 0 <= \result) && tmp <= 0) && 1 <= \result) && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel) && 0 < tmp + 1))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || (((((((1 <= tmp___0 && 0 <= \result) && tmp <= 0) && 1 <= \result) && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel) && 0 < tmp + 1)) || !(methaneLevelCritical == 0))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) [2021-12-16 00:58:53,091 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((2 <= waterLevel && pumpRunning == 0) || (((\result == 0 && !(0 == tmp)) && tmp___0 == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) && (((((((\result == 0 && !(0 == tmp)) && tmp___0 == 0) && pumpRunning == 0) || !(waterLevel == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(2 <= waterLevel)) [2021-12-16 00:58:53,110 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 00:58:53,110 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 00:58:53,110 INFO L158 Benchmark]: Toolchain (without parser) took 9847.65ms. Allocated memory was 104.9MB in the beginning and 207.6MB in the end (delta: 102.8MB). Free memory was 75.3MB in the beginning and 123.6MB in the end (delta: -48.3MB). Peak memory consumption was 55.5MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,110 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 104.9MB. Free memory is still 61.8MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 00:58:53,111 INFO L158 Benchmark]: CACSL2BoogieTranslator took 330.05ms. Allocated memory is still 104.9MB. Free memory was 75.0MB in the beginning and 70.2MB in the end (delta: 4.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,111 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.12ms. Allocated memory is still 104.9MB. Free memory was 70.2MB in the beginning and 67.7MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,111 INFO L158 Benchmark]: Boogie Preprocessor took 26.17ms. Allocated memory is still 104.9MB. Free memory was 67.7MB in the beginning and 66.0MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,112 INFO L158 Benchmark]: RCFGBuilder took 452.95ms. Allocated memory was 104.9MB in the beginning and 140.5MB in the end (delta: 35.7MB). Free memory was 66.0MB in the beginning and 112.9MB in the end (delta: -47.0MB). Peak memory consumption was 19.8MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,112 INFO L158 Benchmark]: TraceAbstraction took 8925.23ms. Allocated memory was 140.5MB in the beginning and 207.6MB in the end (delta: 67.1MB). Free memory was 112.9MB in the beginning and 131.0MB in the end (delta: -18.1MB). Peak memory consumption was 124.6MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,112 INFO L158 Benchmark]: Witness Printer took 51.88ms. Allocated memory is still 207.6MB. Free memory was 131.0MB in the beginning and 123.6MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,113 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 104.9MB. Free memory is still 61.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 330.05ms. Allocated memory is still 104.9MB. Free memory was 75.0MB in the beginning and 70.2MB in the end (delta: 4.9MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 54.12ms. Allocated memory is still 104.9MB. Free memory was 70.2MB in the beginning and 67.7MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 26.17ms. Allocated memory is still 104.9MB. Free memory was 67.7MB in the beginning and 66.0MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 452.95ms. Allocated memory was 104.9MB in the beginning and 140.5MB in the end (delta: 35.7MB). Free memory was 66.0MB in the beginning and 112.9MB in the end (delta: -47.0MB). Peak memory consumption was 19.8MB. Max. memory is 16.1GB. * TraceAbstraction took 8925.23ms. Allocated memory was 140.5MB in the beginning and 207.6MB in the end (delta: 67.1MB). Free memory was 112.9MB in the beginning and 131.0MB in the end (delta: -18.1MB). Peak memory consumption was 124.6MB. Max. memory is 16.1GB. * Witness Printer took 51.88ms. Allocated memory is still 207.6MB. Free memory was 131.0MB in the beginning and 123.6MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 661]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.8s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.9s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1871 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1836 mSDsluCounter, 4143 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2627 mSDsCounter, 569 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1591 IncrementalHoareTripleChecker+Invalid, 2160 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 569 mSolverCounterUnsat, 1516 mSDtfsCounter, 1591 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 471 GetRequests, 359 SyntacticMatches, 4 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 150 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1178occurred in iteration=11, InterpolantAutomatonStates: 93, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 391 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 3087 PreInvPairs, 3323 NumberOfFragments, 3114 HoareAnnotationTreeSize, 3087 FomulaSimplifications, 2341 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 46 FomulaSimplificationsInter, 12130 FormulaSimplificationTreeSizeReductionInter, 3.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 905 NumberOfCodeBlocks, 905 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 890 ConstructedInterpolants, 0 QuantifiedInterpolants, 1517 SizeOfPredicates, 12 NumberOfNonLiveVariables, 1323 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 156/164 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && systemActive == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 <= waterLevel) && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0)) || ((((splverifierCounter == 0 && waterLevel == 1) && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0)) || ((((splverifierCounter == 0 && waterLevel == 1) && systemActive == 0) && methaneLevelCritical == 0) && pumpRunning == 0)) || ((((splverifierCounter == 0 && systemActive == 0) && 1 <= methaneLevelCritical) && 1 <= waterLevel) && pumpRunning == 0)) || (((splverifierCounter == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && systemActive == 1) - InvariantResult [Line: 859]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((methaneLevelCritical <= \result && 2 <= waterLevel) && pumpRunning == 0)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 953]: Loop Invariant Derived loop invariant: (((((splverifierCounter == 0 && systemActive == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && pumpRunning == 0) || ((((splverifierCounter == 0 && waterLevel == 1) && systemActive == 0) && methaneLevelCritical == 0) && pumpRunning == 0)) || ((((splverifierCounter == 0 && systemActive == 0) && 1 <= methaneLevelCritical) && 1 <= waterLevel) && pumpRunning == 0) - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || ((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && ((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 <= methaneLevelCritical) || ((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(2 <= \old(waterLevel)) || ((\result == 0 && 1 <= waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((((1 <= tmp___0 && 0 <= \result) && tmp <= 0) && 1 <= \result) && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel) && 0 < tmp + 1))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || (((((((1 <= tmp___0 && 0 <= \result) && tmp <= 0) && 1 <= \result) && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel) && 0 < tmp + 1)) || !(methaneLevelCritical == 0))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((0 <= \result && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((0 <= \result && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel)) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: (((((((2 <= waterLevel && pumpRunning == 0) || (((\result == 0 && !(0 == tmp)) && tmp___0 == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) && (((((((\result == 0 && !(0 == tmp)) && tmp___0 == 0) && pumpRunning == 0) || !(waterLevel == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(2 <= waterLevel)) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || (((methaneLevelCritical <= \result && methaneLevelCritical <= tmp) && 2 <= waterLevel) && pumpRunning == 0)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 825]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 988]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: (((((splverifierCounter == 0 && 2 <= waterLevel) && 1 <= methaneLevelCritical) && systemActive == 1) || ((((splverifierCounter == 0 && 1 <= waterLevel) && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0)) || ((((splverifierCounter == 0 && waterLevel == 1) && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0)) || (((splverifierCounter == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && systemActive == 1) - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && ((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: ((((((((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((!(1 == systemActive) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((((tmp == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0))) && ((((!(2 <= \old(waterLevel)) || (tmp == 0 && 2 <= waterLevel)) || !(1 == systemActive)) || ((tmp == 0 && 1 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: (((((((2 <= waterLevel && pumpRunning == 0) || (!(\result == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0)) && ((((!(\result == 0) || !(waterLevel == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 800]: Loop Invariant Derived loop invariant: (((((((((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((!(1 == systemActive) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && ((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || pumpRunning == 0)) && ((((!(\old(waterLevel) == 1) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) RESULT: Ultimate proved your program to be correct! [2021-12-16 00:58:53,149 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE