./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:07:08,295 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:07:08,298 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:07:08,351 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:07:08,351 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:07:08,355 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:07:08,356 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:07:08,362 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:07:08,364 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:07:08,370 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:07:08,371 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:07:08,372 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:07:08,372 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:07:08,375 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:07:08,377 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:07:08,382 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:07:08,384 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:07:08,385 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:07:08,386 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:07:08,388 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:07:08,389 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:07:08,392 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:07:08,393 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:07:08,394 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:07:08,396 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:07:08,398 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:07:08,399 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:07:08,400 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:07:08,401 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:07:08,402 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:07:08,402 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:07:08,403 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:07:08,404 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:07:08,405 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:07:08,406 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:07:08,407 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:07:08,408 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:07:08,408 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:07:08,408 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:07:08,409 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:07:08,409 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:07:08,410 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:07:08,429 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:07:08,429 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:07:08,429 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:07:08,430 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:07:08,430 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:07:08,431 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:07:08,431 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:07:08,431 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:07:08,432 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:07:08,432 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:07:08,432 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:07:08,432 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:07:08,432 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:07:08,433 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:07:08,433 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:07:08,433 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:07:08,433 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:07:08,433 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:07:08,434 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:07:08,434 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:07:08,434 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:07:08,434 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:07:08,434 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:07:08,435 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:07:08,435 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:07:08,435 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:07:08,435 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:07:08,435 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:07:08,436 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:07:08,436 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:07:08,436 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:07:08,436 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:07:08,436 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:07:08,437 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:07:08,437 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0fa225959be52b1defd5d055d32ae3a8dd944c37a01adb589e2f547028e60f67 [2021-12-17 15:07:08,657 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:07:08,687 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:07:08,690 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:07:08,691 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:07:08,692 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:07:08,693 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2021-12-17 15:07:08,764 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/80ae6b9ed/b99e787383d14459a34cf7993e0159dd/FLAG980a67420 [2021-12-17 15:07:09,216 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:07:09,217 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c [2021-12-17 15:07:09,232 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/80ae6b9ed/b99e787383d14459a34cf7993e0159dd/FLAG980a67420 [2021-12-17 15:07:09,564 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/80ae6b9ed/b99e787383d14459a34cf7993e0159dd [2021-12-17 15:07:09,566 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:07:09,568 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:07:09,570 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:07:09,571 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:07:09,574 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:07:09,574 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:07:09" (1/1) ... [2021-12-17 15:07:09,576 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5859cd8f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:09, skipping insertion in model container [2021-12-17 15:07:09,577 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:07:09" (1/1) ... [2021-12-17 15:07:09,583 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:07:09,629 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:07:09,867 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2021-12-17 15:07:09,886 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:07:09,894 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:07:09,938 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product60.cil.c[14569,14582] [2021-12-17 15:07:09,950 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:07:09,965 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:07:09,966 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:09 WrapperNode [2021-12-17 15:07:09,966 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:07:09,967 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:07:09,967 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:07:09,967 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:07:09,973 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:09" (1/1) ... [2021-12-17 15:07:09,985 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:09" (1/1) ... [2021-12-17 15:07:10,026 INFO L137 Inliner]: procedures = 58, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 274 [2021-12-17 15:07:10,027 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:07:10,027 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:07:10,027 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:07:10,028 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:07:10,035 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:09" (1/1) ... [2021-12-17 15:07:10,035 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:09" (1/1) ... [2021-12-17 15:07:10,037 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:09" (1/1) ... [2021-12-17 15:07:10,038 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:09" (1/1) ... [2021-12-17 15:07:10,043 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:09" (1/1) ... [2021-12-17 15:07:10,047 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:09" (1/1) ... [2021-12-17 15:07:10,048 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:09" (1/1) ... [2021-12-17 15:07:10,057 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:07:10,058 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:07:10,058 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:07:10,058 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:07:10,059 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:09" (1/1) ... [2021-12-17 15:07:10,065 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:07:10,075 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:07:10,093 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:07:10,104 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:07:10,127 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:07:10,127 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:07:10,127 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:07:10,128 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-17 15:07:10,128 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-17 15:07:10,128 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:07:10,128 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:07:10,128 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:07:10,129 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:07:10,129 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:07:10,129 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:07:10,129 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:07:10,129 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:07:10,130 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-17 15:07:10,130 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-17 15:07:10,130 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:07:10,130 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:07:10,130 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:07:10,130 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:07:10,130 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:07:10,223 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:07:10,224 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:07:10,525 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:07:10,531 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:07:10,532 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:07:10,548 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:07:10 BoogieIcfgContainer [2021-12-17 15:07:10,549 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:07:10,550 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:07:10,551 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:07:10,554 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:07:10,554 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:07:09" (1/3) ... [2021-12-17 15:07:10,555 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@417a596d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:07:10, skipping insertion in model container [2021-12-17 15:07:10,556 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:09" (2/3) ... [2021-12-17 15:07:10,556 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@417a596d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:07:10, skipping insertion in model container [2021-12-17 15:07:10,556 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:07:10" (3/3) ... [2021-12-17 15:07:10,557 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product60.cil.c [2021-12-17 15:07:10,565 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:07:10,565 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:07:10,616 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:07:10,624 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:07:10,625 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:07:10,649 INFO L276 IsEmpty]: Start isEmpty. Operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-17 15:07:10,656 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2021-12-17 15:07:10,657 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:10,658 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:10,658 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:10,663 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:10,664 INFO L85 PathProgramCache]: Analyzing trace with hash 47908020, now seen corresponding path program 1 times [2021-12-17 15:07:10,671 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:10,671 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [459636238] [2021-12-17 15:07:10,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:10,673 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:10,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:10,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:07:10,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:10,870 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:10,870 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:10,871 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [459636238] [2021-12-17 15:07:10,871 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [459636238] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:10,872 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:10,872 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:07:10,873 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2121087932] [2021-12-17 15:07:10,874 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:10,877 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:07:10,878 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:10,899 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:07:10,900 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:07:10,902 INFO L87 Difference]: Start difference. First operand has 99 states, 75 states have (on average 1.3733333333333333) internal successors, (103), 84 states have internal predecessors, (103), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:10,935 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:10,936 INFO L93 Difference]: Finished difference Result 190 states and 257 transitions. [2021-12-17 15:07:10,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:07:10,938 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2021-12-17 15:07:10,938 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:10,945 INFO L225 Difference]: With dead ends: 190 [2021-12-17 15:07:10,945 INFO L226 Difference]: Without dead ends: 90 [2021-12-17 15:07:10,949 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:07:10,952 INFO L933 BasicCegarLoop]: 125 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 125 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:10,953 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:10,971 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2021-12-17 15:07:11,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2021-12-17 15:07:11,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 68 states have (on average 1.3088235294117647) internal successors, (89), 76 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-17 15:07:11,017 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 116 transitions. [2021-12-17 15:07:11,018 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 116 transitions. Word has length 23 [2021-12-17 15:07:11,019 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:11,019 INFO L470 AbstractCegarLoop]: Abstraction has 90 states and 116 transitions. [2021-12-17 15:07:11,019 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:11,019 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 116 transitions. [2021-12-17 15:07:11,024 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-12-17 15:07:11,024 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:11,024 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:11,025 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:07:11,025 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:11,026 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:11,027 INFO L85 PathProgramCache]: Analyzing trace with hash 776313737, now seen corresponding path program 1 times [2021-12-17 15:07:11,027 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:11,028 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [366038236] [2021-12-17 15:07:11,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:11,029 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:11,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:11,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:07:11,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:11,114 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:11,114 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:11,114 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [366038236] [2021-12-17 15:07:11,115 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [366038236] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:11,115 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:11,115 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:07:11,115 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1175781199] [2021-12-17 15:07:11,116 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:11,117 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:07:11,117 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:11,117 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:07:11,118 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:11,118 INFO L87 Difference]: Start difference. First operand 90 states and 116 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:11,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:11,139 INFO L93 Difference]: Finished difference Result 141 states and 181 transitions. [2021-12-17 15:07:11,142 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:07:11,143 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2021-12-17 15:07:11,143 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:11,144 INFO L225 Difference]: With dead ends: 141 [2021-12-17 15:07:11,145 INFO L226 Difference]: Without dead ends: 81 [2021-12-17 15:07:11,152 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:11,154 INFO L933 BasicCegarLoop]: 103 mSDtfsCounter, 17 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:11,156 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 184 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:11,158 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2021-12-17 15:07:11,165 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2021-12-17 15:07:11,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 70 states have internal predecessors, (82), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-17 15:07:11,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 104 transitions. [2021-12-17 15:07:11,172 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 104 transitions. Word has length 24 [2021-12-17 15:07:11,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:11,174 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 104 transitions. [2021-12-17 15:07:11,174 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:11,174 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 104 transitions. [2021-12-17 15:07:11,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2021-12-17 15:07:11,180 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:11,180 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:11,180 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:07:11,181 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:11,181 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:11,185 INFO L85 PathProgramCache]: Analyzing trace with hash -6644295, now seen corresponding path program 1 times [2021-12-17 15:07:11,185 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:11,186 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [981629936] [2021-12-17 15:07:11,186 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:11,187 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:11,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:11,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:07:11,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:11,244 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:11,245 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:11,245 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [981629936] [2021-12-17 15:07:11,245 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [981629936] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:11,245 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:11,245 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:07:11,245 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [561803826] [2021-12-17 15:07:11,246 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:11,246 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:07:11,246 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:11,247 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:07:11,247 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:11,247 INFO L87 Difference]: Start difference. First operand 81 states and 104 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:11,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:11,294 INFO L93 Difference]: Finished difference Result 227 states and 297 transitions. [2021-12-17 15:07:11,294 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:07:11,295 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2021-12-17 15:07:11,295 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:11,297 INFO L225 Difference]: With dead ends: 227 [2021-12-17 15:07:11,297 INFO L226 Difference]: Without dead ends: 153 [2021-12-17 15:07:11,297 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:11,299 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 96 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:11,299 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [96 Valid, 219 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:11,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153 states. [2021-12-17 15:07:11,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153 to 150. [2021-12-17 15:07:11,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 150 states, 113 states have (on average 1.345132743362832) internal successors, (152), 128 states have internal predecessors, (152), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2021-12-17 15:07:11,327 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 150 states and 196 transitions. [2021-12-17 15:07:11,328 INFO L78 Accepts]: Start accepts. Automaton has 150 states and 196 transitions. Word has length 29 [2021-12-17 15:07:11,328 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:11,328 INFO L470 AbstractCegarLoop]: Abstraction has 150 states and 196 transitions. [2021-12-17 15:07:11,329 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:11,329 INFO L276 IsEmpty]: Start isEmpty. Operand 150 states and 196 transitions. [2021-12-17 15:07:11,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-12-17 15:07:11,330 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:11,331 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:11,331 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:07:11,331 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:11,332 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:11,332 INFO L85 PathProgramCache]: Analyzing trace with hash -999312607, now seen corresponding path program 1 times [2021-12-17 15:07:11,332 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:11,332 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [513305655] [2021-12-17 15:07:11,332 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:11,332 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:11,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:11,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-17 15:07:11,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:11,444 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:11,445 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:11,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [513305655] [2021-12-17 15:07:11,445 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [513305655] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:11,445 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:11,445 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:11,445 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288440422] [2021-12-17 15:07:11,446 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:11,446 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:11,446 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:11,447 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:11,447 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:11,447 INFO L87 Difference]: Start difference. First operand 150 states and 196 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:11,582 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:11,582 INFO L93 Difference]: Finished difference Result 436 states and 579 transitions. [2021-12-17 15:07:11,583 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:07:11,583 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2021-12-17 15:07:11,584 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:11,591 INFO L225 Difference]: With dead ends: 436 [2021-12-17 15:07:11,593 INFO L226 Difference]: Without dead ends: 293 [2021-12-17 15:07:11,594 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:07:11,595 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 75 mSDsluCounter, 397 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 509 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:11,596 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [78 Valid, 509 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:07:11,600 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 293 states. [2021-12-17 15:07:11,634 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 293 to 287. [2021-12-17 15:07:11,635 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 287 states, 214 states have (on average 1.3364485981308412) internal successors, (286), 243 states have internal predecessors, (286), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) [2021-12-17 15:07:11,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 287 states to 287 states and 376 transitions. [2021-12-17 15:07:11,641 INFO L78 Accepts]: Start accepts. Automaton has 287 states and 376 transitions. Word has length 32 [2021-12-17 15:07:11,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:11,641 INFO L470 AbstractCegarLoop]: Abstraction has 287 states and 376 transitions. [2021-12-17 15:07:11,642 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:11,642 INFO L276 IsEmpty]: Start isEmpty. Operand 287 states and 376 transitions. [2021-12-17 15:07:11,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2021-12-17 15:07:11,644 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:11,644 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:11,644 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:07:11,645 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:11,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:11,647 INFO L85 PathProgramCache]: Analyzing trace with hash -756738107, now seen corresponding path program 1 times [2021-12-17 15:07:11,647 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:11,647 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [370008564] [2021-12-17 15:07:11,648 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:11,648 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:11,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:11,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-17 15:07:11,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:11,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-17 15:07:11,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:11,717 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:11,718 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:11,718 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [370008564] [2021-12-17 15:07:11,718 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [370008564] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:11,718 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:11,718 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:11,718 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [513489048] [2021-12-17 15:07:11,719 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:11,719 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:11,719 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:11,720 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:11,720 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:11,720 INFO L87 Difference]: Start difference. First operand 287 states and 376 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:07:11,987 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:11,987 INFO L93 Difference]: Finished difference Result 745 states and 993 transitions. [2021-12-17 15:07:11,988 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:07:11,988 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 36 [2021-12-17 15:07:11,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:11,994 INFO L225 Difference]: With dead ends: 745 [2021-12-17 15:07:11,994 INFO L226 Difference]: Without dead ends: 465 [2021-12-17 15:07:11,996 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:07:11,997 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 126 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 211 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 245 SdHoareTripleChecker+Invalid, 254 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 211 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:11,998 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [131 Valid, 245 Invalid, 254 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 211 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:07:12,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 465 states. [2021-12-17 15:07:12,036 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 465 to 451. [2021-12-17 15:07:12,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 451 states, 338 states have (on average 1.2899408284023668) internal successors, (436), 371 states have internal predecessors, (436), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) [2021-12-17 15:07:12,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 451 states to 451 states and 576 transitions. [2021-12-17 15:07:12,040 INFO L78 Accepts]: Start accepts. Automaton has 451 states and 576 transitions. Word has length 36 [2021-12-17 15:07:12,041 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:12,041 INFO L470 AbstractCegarLoop]: Abstraction has 451 states and 576 transitions. [2021-12-17 15:07:12,041 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:07:12,041 INFO L276 IsEmpty]: Start isEmpty. Operand 451 states and 576 transitions. [2021-12-17 15:07:12,049 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-17 15:07:12,049 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:12,049 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:12,049 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:07:12,050 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:12,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:12,050 INFO L85 PathProgramCache]: Analyzing trace with hash -1441513323, now seen corresponding path program 1 times [2021-12-17 15:07:12,050 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:12,051 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [574362212] [2021-12-17 15:07:12,051 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:12,051 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:12,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:12,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-17 15:07:12,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:12,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:07:12,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:12,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:12,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:12,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-17 15:07:12,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:12,137 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:07:12,137 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:12,137 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [574362212] [2021-12-17 15:07:12,137 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [574362212] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:12,138 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:12,138 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:07:12,138 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1101818173] [2021-12-17 15:07:12,138 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:12,139 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:07:12,139 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:12,139 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:07:12,140 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:07:12,141 INFO L87 Difference]: Start difference. First operand 451 states and 576 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:07:12,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:12,427 INFO L93 Difference]: Finished difference Result 1009 states and 1320 transitions. [2021-12-17 15:07:12,428 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-17 15:07:12,428 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2021-12-17 15:07:12,430 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:12,435 INFO L225 Difference]: With dead ends: 1009 [2021-12-17 15:07:12,436 INFO L226 Difference]: Without dead ends: 565 [2021-12-17 15:07:12,438 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-17 15:07:12,439 INFO L933 BasicCegarLoop]: 86 mSDtfsCounter, 136 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 258 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 310 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 258 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:12,442 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [137 Valid, 254 Invalid, 310 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 258 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:07:12,443 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 565 states. [2021-12-17 15:07:12,483 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 565 to 543. [2021-12-17 15:07:12,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 543 states, 410 states have (on average 1.2536585365853659) internal successors, (514), 443 states have internal predecessors, (514), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2021-12-17 15:07:12,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 543 states to 543 states and 682 transitions. [2021-12-17 15:07:12,489 INFO L78 Accepts]: Start accepts. Automaton has 543 states and 682 transitions. Word has length 55 [2021-12-17 15:07:12,490 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:12,490 INFO L470 AbstractCegarLoop]: Abstraction has 543 states and 682 transitions. [2021-12-17 15:07:12,490 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:07:12,490 INFO L276 IsEmpty]: Start isEmpty. Operand 543 states and 682 transitions. [2021-12-17 15:07:12,492 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-17 15:07:12,493 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:12,494 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:12,494 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:07:12,494 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:12,495 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:12,495 INFO L85 PathProgramCache]: Analyzing trace with hash -1379473709, now seen corresponding path program 1 times [2021-12-17 15:07:12,495 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:12,495 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [758807530] [2021-12-17 15:07:12,495 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:12,496 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:12,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:12,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-17 15:07:12,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:12,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:07:12,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:12,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:12,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:12,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-17 15:07:12,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:12,620 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:07:12,621 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:12,621 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [758807530] [2021-12-17 15:07:12,621 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [758807530] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:12,621 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:12,621 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:07:12,621 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [612016107] [2021-12-17 15:07:12,621 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:12,622 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:07:12,622 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:12,622 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:07:12,622 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:07:12,622 INFO L87 Difference]: Start difference. First operand 543 states and 682 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:07:13,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:13,035 INFO L93 Difference]: Finished difference Result 1133 states and 1460 transitions. [2021-12-17 15:07:13,036 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-17 15:07:13,036 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2021-12-17 15:07:13,036 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:13,039 INFO L225 Difference]: With dead ends: 1133 [2021-12-17 15:07:13,040 INFO L226 Difference]: Without dead ends: 597 [2021-12-17 15:07:13,042 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=90, Invalid=182, Unknown=0, NotChecked=0, Total=272 [2021-12-17 15:07:13,043 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 366 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 352 mSolverCounterSat, 131 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 371 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 483 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 131 IncrementalHoareTripleChecker+Valid, 352 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:13,043 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [371 Valid, 282 Invalid, 483 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [131 Valid, 352 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-17 15:07:13,044 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 597 states. [2021-12-17 15:07:13,071 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 597 to 551. [2021-12-17 15:07:13,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 551 states, 418 states have (on average 1.2488038277511961) internal successors, (522), 451 states have internal predecessors, (522), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2021-12-17 15:07:13,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 551 states to 551 states and 690 transitions. [2021-12-17 15:07:13,076 INFO L78 Accepts]: Start accepts. Automaton has 551 states and 690 transitions. Word has length 55 [2021-12-17 15:07:13,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:13,076 INFO L470 AbstractCegarLoop]: Abstraction has 551 states and 690 transitions. [2021-12-17 15:07:13,077 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-17 15:07:13,077 INFO L276 IsEmpty]: Start isEmpty. Operand 551 states and 690 transitions. [2021-12-17 15:07:13,078 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2021-12-17 15:07:13,078 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:13,078 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:13,079 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:07:13,079 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:13,079 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:13,080 INFO L85 PathProgramCache]: Analyzing trace with hash -1888946799, now seen corresponding path program 1 times [2021-12-17 15:07:13,080 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:13,080 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [114833292] [2021-12-17 15:07:13,080 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:13,080 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:13,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:13,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-17 15:07:13,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:13,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:07:13,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:13,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:13,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:13,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2021-12-17 15:07:13,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:13,142 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:07:13,142 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:13,143 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [114833292] [2021-12-17 15:07:13,143 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [114833292] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:13,143 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:13,143 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:13,143 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1098610217] [2021-12-17 15:07:13,143 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:13,144 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:13,144 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:13,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:13,144 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:13,145 INFO L87 Difference]: Start difference. First operand 551 states and 690 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:07:13,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:13,480 INFO L93 Difference]: Finished difference Result 1587 states and 2068 transitions. [2021-12-17 15:07:13,480 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-17 15:07:13,480 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2021-12-17 15:07:13,481 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:13,487 INFO L225 Difference]: With dead ends: 1587 [2021-12-17 15:07:13,487 INFO L226 Difference]: Without dead ends: 1043 [2021-12-17 15:07:13,490 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-17 15:07:13,491 INFO L933 BasicCegarLoop]: 136 mSDtfsCounter, 321 mSDsluCounter, 143 mSDsCounter, 0 mSdLazyCounter, 248 mSolverCounterSat, 126 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 324 SdHoareTripleChecker+Valid, 279 SdHoareTripleChecker+Invalid, 374 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 126 IncrementalHoareTripleChecker+Valid, 248 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:13,491 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [324 Valid, 279 Invalid, 374 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [126 Valid, 248 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:07:13,493 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1043 states. [2021-12-17 15:07:13,537 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1043 to 1031. [2021-12-17 15:07:13,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1031 states, 778 states have (on average 1.2210796915167095) internal successors, (950), 829 states have internal predecessors, (950), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) [2021-12-17 15:07:13,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1031 states to 1031 states and 1296 transitions. [2021-12-17 15:07:13,546 INFO L78 Accepts]: Start accepts. Automaton has 1031 states and 1296 transitions. Word has length 55 [2021-12-17 15:07:13,546 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:13,546 INFO L470 AbstractCegarLoop]: Abstraction has 1031 states and 1296 transitions. [2021-12-17 15:07:13,546 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-17 15:07:13,547 INFO L276 IsEmpty]: Start isEmpty. Operand 1031 states and 1296 transitions. [2021-12-17 15:07:13,548 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2021-12-17 15:07:13,549 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:13,549 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:13,549 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:07:13,549 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:13,550 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:13,550 INFO L85 PathProgramCache]: Analyzing trace with hash 625238315, now seen corresponding path program 1 times [2021-12-17 15:07:13,550 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:13,550 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [956580049] [2021-12-17 15:07:13,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:13,551 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:13,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:13,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:07:13,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:13,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-17 15:07:13,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:13,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:07:13,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:13,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:13,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:13,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-17 15:07:13,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:13,670 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-17 15:07:13,670 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:13,670 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [956580049] [2021-12-17 15:07:13,671 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [956580049] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:07:13,671 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [415497546] [2021-12-17 15:07:13,671 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:13,671 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:07:13,671 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:07:13,675 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:07:13,710 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:07:13,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:13,792 INFO L263 TraceCheckSpWp]: Trace formula consists of 378 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-17 15:07:13,797 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:07:14,060 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:14,061 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-17 15:07:14,061 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [415497546] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:14,061 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-17 15:07:14,061 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [13] total 18 [2021-12-17 15:07:14,061 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [294397426] [2021-12-17 15:07:14,062 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:14,062 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:07:14,062 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:14,063 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:07:14,063 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=262, Unknown=0, NotChecked=0, Total=306 [2021-12-17 15:07:14,063 INFO L87 Difference]: Start difference. First operand 1031 states and 1296 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-17 15:07:14,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:14,266 INFO L93 Difference]: Finished difference Result 2013 states and 2543 transitions. [2021-12-17 15:07:14,266 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:07:14,267 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 59 [2021-12-17 15:07:14,267 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:14,273 INFO L225 Difference]: With dead ends: 2013 [2021-12-17 15:07:14,273 INFO L226 Difference]: Without dead ends: 989 [2021-12-17 15:07:14,276 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2021-12-17 15:07:14,279 INFO L933 BasicCegarLoop]: 189 mSDtfsCounter, 75 mSDsluCounter, 450 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 639 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:14,279 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 639 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:07:14,281 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 989 states. [2021-12-17 15:07:14,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 989 to 985. [2021-12-17 15:07:14,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 985 states, 742 states have (on average 1.2075471698113207) internal successors, (896), 791 states have internal predecessors, (896), 126 states have call successors, (126), 114 states have call predecessors, (126), 116 states have return successors, (188), 122 states have call predecessors, (188), 126 states have call successors, (188) [2021-12-17 15:07:14,334 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 985 states to 985 states and 1210 transitions. [2021-12-17 15:07:14,335 INFO L78 Accepts]: Start accepts. Automaton has 985 states and 1210 transitions. Word has length 59 [2021-12-17 15:07:14,335 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:14,336 INFO L470 AbstractCegarLoop]: Abstraction has 985 states and 1210 transitions. [2021-12-17 15:07:14,336 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 6 states have internal predecessors, (48), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-17 15:07:14,336 INFO L276 IsEmpty]: Start isEmpty. Operand 985 states and 1210 transitions. [2021-12-17 15:07:14,341 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2021-12-17 15:07:14,341 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:14,341 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:14,369 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-12-17 15:07:14,559 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:07:14,559 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:14,560 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:14,560 INFO L85 PathProgramCache]: Analyzing trace with hash 1921806068, now seen corresponding path program 1 times [2021-12-17 15:07:14,560 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:14,560 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1423881027] [2021-12-17 15:07:14,560 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:14,560 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:14,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:14,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:07:14,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:14,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-17 15:07:14,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:14,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:07:14,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:14,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:14,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:14,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:07:14,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:14,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2021-12-17 15:07:14,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:14,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2021-12-17 15:07:14,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:14,669 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:07:14,669 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:14,669 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1423881027] [2021-12-17 15:07:14,670 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1423881027] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:14,670 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:14,670 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-17 15:07:14,670 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2043675309] [2021-12-17 15:07:14,670 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:14,671 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-17 15:07:14,671 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:14,671 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-17 15:07:14,671 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-17 15:07:14,672 INFO L87 Difference]: Start difference. First operand 985 states and 1210 transitions. Second operand has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-17 15:07:15,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:15,046 INFO L93 Difference]: Finished difference Result 1800 states and 2215 transitions. [2021-12-17 15:07:15,046 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-17 15:07:15,047 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 86 [2021-12-17 15:07:15,047 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:15,051 INFO L225 Difference]: With dead ends: 1800 [2021-12-17 15:07:15,051 INFO L226 Difference]: Without dead ends: 822 [2021-12-17 15:07:15,054 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2021-12-17 15:07:15,055 INFO L933 BasicCegarLoop]: 127 mSDtfsCounter, 404 mSDsluCounter, 154 mSDsCounter, 0 mSdLazyCounter, 273 mSolverCounterSat, 163 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 413 SdHoareTripleChecker+Valid, 281 SdHoareTripleChecker+Invalid, 436 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 163 IncrementalHoareTripleChecker+Valid, 273 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:15,055 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [413 Valid, 281 Invalid, 436 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [163 Valid, 273 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-17 15:07:15,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 822 states. [2021-12-17 15:07:15,090 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 822 to 790. [2021-12-17 15:07:15,092 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 596 states have (on average 1.1895973154362416) internal successors, (709), 642 states have internal predecessors, (709), 101 states have call successors, (101), 82 states have call predecessors, (101), 92 states have return successors, (150), 99 states have call predecessors, (150), 101 states have call successors, (150) [2021-12-17 15:07:15,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 960 transitions. [2021-12-17 15:07:15,096 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 960 transitions. Word has length 86 [2021-12-17 15:07:15,096 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:15,096 INFO L470 AbstractCegarLoop]: Abstraction has 790 states and 960 transitions. [2021-12-17 15:07:15,097 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.375) internal successors, (67), 4 states have internal predecessors, (67), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2021-12-17 15:07:15,097 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 960 transitions. [2021-12-17 15:07:15,099 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-12-17 15:07:15,099 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:15,099 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:15,100 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-17 15:07:15,100 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:15,100 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:15,100 INFO L85 PathProgramCache]: Analyzing trace with hash 1670948605, now seen corresponding path program 1 times [2021-12-17 15:07:15,100 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:15,101 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [154229435] [2021-12-17 15:07:15,101 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:15,101 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:15,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:15,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:07:15,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:15,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:07:15,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:15,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:07:15,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:15,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:15,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:15,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:07:15,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:15,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-17 15:07:15,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:15,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-17 15:07:15,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:15,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:15,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:15,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-12-17 15:07:15,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:15,237 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2021-12-17 15:07:15,238 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:15,238 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [154229435] [2021-12-17 15:07:15,238 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [154229435] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:07:15,239 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [399690863] [2021-12-17 15:07:15,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:15,239 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:07:15,239 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:07:15,244 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:07:15,245 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-17 15:07:15,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:15,334 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 11 conjunts are in the unsatisfiable core [2021-12-17 15:07:15,339 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:07:15,577 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:07:15,578 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-17 15:07:15,578 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [399690863] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:15,578 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-17 15:07:15,578 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 10 [2021-12-17 15:07:15,578 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [416741980] [2021-12-17 15:07:15,579 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:15,580 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:15,580 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:15,580 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:15,581 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:07:15,581 INFO L87 Difference]: Start difference. First operand 790 states and 960 transitions. Second operand has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-17 15:07:15,764 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:15,765 INFO L93 Difference]: Finished difference Result 2049 states and 2607 transitions. [2021-12-17 15:07:15,765 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-17 15:07:15,765 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 98 [2021-12-17 15:07:15,766 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:15,772 INFO L225 Difference]: With dead ends: 2049 [2021-12-17 15:07:15,773 INFO L226 Difference]: Without dead ends: 1430 [2021-12-17 15:07:15,775 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 112 SyntacticMatches, 4 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2021-12-17 15:07:15,776 INFO L933 BasicCegarLoop]: 203 mSDtfsCounter, 187 mSDsluCounter, 548 mSDsCounter, 0 mSdLazyCounter, 63 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 751 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 63 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:15,776 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [190 Valid, 751 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 63 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:07:15,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1430 states. [2021-12-17 15:07:15,831 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1430 to 1178. [2021-12-17 15:07:15,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1178 states, 886 states have (on average 1.1884875846501128) internal successors, (1053), 954 states have internal predecessors, (1053), 154 states have call successors, (154), 116 states have call predecessors, (154), 137 states have return successors, (255), 149 states have call predecessors, (255), 154 states have call successors, (255) [2021-12-17 15:07:15,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1178 states to 1178 states and 1462 transitions. [2021-12-17 15:07:15,839 INFO L78 Accepts]: Start accepts. Automaton has 1178 states and 1462 transitions. Word has length 98 [2021-12-17 15:07:15,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:15,840 INFO L470 AbstractCegarLoop]: Abstraction has 1178 states and 1462 transitions. [2021-12-17 15:07:15,840 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.833333333333334) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2021-12-17 15:07:15,840 INFO L276 IsEmpty]: Start isEmpty. Operand 1178 states and 1462 transitions. [2021-12-17 15:07:15,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2021-12-17 15:07:15,842 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:15,843 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:15,871 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-17 15:07:16,059 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-17 15:07:16,060 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:16,060 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:16,060 INFO L85 PathProgramCache]: Analyzing trace with hash -134489729, now seen corresponding path program 1 times [2021-12-17 15:07:16,060 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:16,060 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [595182615] [2021-12-17 15:07:16,060 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:16,061 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:16,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:16,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-17 15:07:16,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:16,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:07:16,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:16,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:07:16,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:16,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:16,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:16,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:07:16,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:16,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2021-12-17 15:07:16,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:16,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-17 15:07:16,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:16,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:16,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:16,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2021-12-17 15:07:16,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:16,162 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2021-12-17 15:07:16,162 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:16,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [595182615] [2021-12-17 15:07:16,162 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [595182615] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:07:16,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [797698099] [2021-12-17 15:07:16,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:16,162 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:07:16,163 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:07:16,164 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:07:16,165 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-12-17 15:07:16,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:16,248 INFO L263 TraceCheckSpWp]: Trace formula consists of 473 conjuncts, 5 conjunts are in the unsatisfiable core [2021-12-17 15:07:16,251 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:07:16,418 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-12-17 15:07:16,419 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-17 15:07:16,419 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [797698099] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:16,419 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-17 15:07:16,419 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2021-12-17 15:07:16,419 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [759644659] [2021-12-17 15:07:16,420 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:16,420 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-17 15:07:16,423 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:16,423 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-17 15:07:16,423 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2021-12-17 15:07:16,424 INFO L87 Difference]: Start difference. First operand 1178 states and 1462 transitions. Second operand has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-17 15:07:16,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:16,481 INFO L93 Difference]: Finished difference Result 1663 states and 2045 transitions. [2021-12-17 15:07:16,481 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-17 15:07:16,481 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2021-12-17 15:07:16,482 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:16,482 INFO L225 Difference]: With dead ends: 1663 [2021-12-17 15:07:16,482 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:07:16,486 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 125 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=167, Unknown=0, NotChecked=0, Total=210 [2021-12-17 15:07:16,487 INFO L933 BasicCegarLoop]: 103 mSDtfsCounter, 33 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 375 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:16,487 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [33 Valid, 375 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:16,488 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:07:16,488 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:07:16,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:07:16,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:07:16,488 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 98 [2021-12-17 15:07:16,489 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:16,489 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:07:16,489 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.8) internal successors, (69), 5 states have internal predecessors, (69), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-12-17 15:07:16,489 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:07:16,489 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:07:16,492 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:07:16,519 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-12-17 15:07:16,716 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:07:16,718 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:07:21,441 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 851 858) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~waterLevel~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse3) (or .cse5 .cse6 .cse4 .cse1) (or .cse5 .cse6 .cse1 .cse2))) [2021-12-17 15:07:21,442 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 851 858) no Hoare annotation was computed. [2021-12-17 15:07:21,442 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 851 858) no Hoare annotation was computed. [2021-12-17 15:07:21,442 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 766 772) no Hoare annotation was computed. [2021-12-17 15:07:21,442 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 766 772) the Hoare annotation is: true [2021-12-17 15:07:21,442 INFO L858 garLoopResultBuilder]: For program point L190-1(lines 186 197) no Hoare annotation was computed. [2021-12-17 15:07:21,443 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 186 197) the Hoare annotation is: (let ((.cse1 (not (= ~waterLevel~0 1))) (.cse6 (not (<= 2 ~waterLevel~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= ~pumpRunning~0 0))) (.cse7 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse9 (not (<= 1 ~waterLevel~0))) (.cse8 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse4 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse3 .cse6) (or .cse0 .cse2 .cse3 .cse6 .cse4) (or .cse1 .cse2 .cse5 .cse7 .cse8) (or .cse2 .cse5 .cse7 .cse8 .cse6) (or .cse0 .cse2 .cse5 .cse9 .cse3) (or .cse2 .cse7 .cse9 .cse8 .cse4))) [2021-12-17 15:07:21,443 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 186 197) no Hoare annotation was computed. [2021-12-17 15:07:21,443 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 198 206) the Hoare annotation is: true [2021-12-17 15:07:21,443 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 198 206) no Hoare annotation was computed. [2021-12-17 15:07:21,443 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 198 206) no Hoare annotation was computed. [2021-12-17 15:07:21,444 INFO L854 garLoopResultBuilder]: At program point L271(line 271) the Hoare annotation is: (let ((.cse4 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse11 (= ~pumpRunning~0 0))) (let ((.cse7 (not (<= 1 |old(~waterLevel~0)|))) (.cse9 (not (= ~systemActive~0 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (and (<= 1 ~waterLevel~0) .cse11)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse4 .cse11)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 .cse5 .cse6 .cse7) (or .cse0 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse8 .cse5 .cse6 .cse9) (or .cse10 .cse8 .cse5 .cse6 .cse9) (or .cse8 .cse3 .cse5 .cse7 .cse9) (or .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse6) (or .cse10 .cse2 .cse5 .cse6 .cse11) (or .cse10 .cse8 .cse2 .cse3 .cse5)))) [2021-12-17 15:07:21,444 INFO L858 garLoopResultBuilder]: For program point L271-1(line 271) no Hoare annotation was computed. [2021-12-17 15:07:21,444 INFO L858 garLoopResultBuilder]: For program point L746-1(lines 745 764) no Hoare annotation was computed. [2021-12-17 15:07:21,444 INFO L858 garLoopResultBuilder]: For program point L808(lines 808 816) no Hoare annotation was computed. [2021-12-17 15:07:21,444 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 742 765) no Hoare annotation was computed. [2021-12-17 15:07:21,444 INFO L858 garLoopResultBuilder]: For program point L804(lines 804 821) no Hoare annotation was computed. [2021-12-17 15:07:21,445 INFO L854 garLoopResultBuilder]: At program point L949(lines 934 952) the Hoare annotation is: (let ((.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= 1 ~systemActive~0))) (.cse7 (and (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 0 |timeShift_isLowWaterSensorDry_#res#1|) (<= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0) (< 0 (+ |timeShift_isLowWaterLevel_~tmp~10#1| 1)))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7) (or .cse5 .cse0 .cse1 .cse2) (or .cse5 .cse6 .cse0 .cse2) (or .cse4 .cse5 .cse7 .cse1) (or .cse6 .cse0 .cse2 .cse3))) [2021-12-17 15:07:21,445 INFO L854 garLoopResultBuilder]: At program point L875(lines 870 878) the Hoare annotation is: (let ((.cse8 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (and .cse8 (= ~waterLevel~0 |old(~waterLevel~0)|) .cse9)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~systemActive~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse3 .cse5 .cse4 .cse6) (or .cse0 .cse3 .cse5 .cse4) (or .cse7 .cse0 .cse5) (or .cse1 .cse2 .cse3 .cse4 .cse6) (or .cse7 (and .cse8 (<= 1 ~waterLevel~0) .cse9) .cse0 .cse1)))) [2021-12-17 15:07:21,445 INFO L858 garLoopResultBuilder]: For program point L277(lines 277 283) no Hoare annotation was computed. [2021-12-17 15:07:21,445 INFO L858 garLoopResultBuilder]: For program point L661(line 661) no Hoare annotation was computed. [2021-12-17 15:07:21,445 INFO L858 garLoopResultBuilder]: For program point L273(lines 273 286) no Hoare annotation was computed. [2021-12-17 15:07:21,445 INFO L854 garLoopResultBuilder]: At program point L273-1(lines 265 289) the Hoare annotation is: (let ((.cse5 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse9 (and .cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 1 |old(~waterLevel~0)|))) (.cse10 (not (= ~systemActive~0 0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= 1 ~systemActive~0))) (.cse11 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~1#1| 0)) (.cse1 (<= 1 ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4) (or .cse3 .cse5 .cse6 .cse7 .cse8) (or .cse9 .cse3 .cse4 .cse6 .cse8) (or .cse9 .cse4 .cse6 .cse8 .cse10) (or (and .cse11 .cse5 .cse2) .cse6 .cse7 .cse8 .cse10) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse6 .cse7 (and .cse11 .cse2)) (or .cse0 (and .cse11 (<= 2 ~waterLevel~0)) .cse3 (and .cse11 .cse1 .cse2) .cse7)))) [2021-12-17 15:07:21,446 INFO L854 garLoopResultBuilder]: At program point L814(line 814) the Hoare annotation is: (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2) (or .cse5 .cse4 .cse6) (or .cse5 .cse4 .cse1) (or .cse4 .cse6 .cse0 .cse2) (or .cse6 .cse0 .cse2 .cse3))) [2021-12-17 15:07:21,446 INFO L854 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= 1 ~systemActive~0))) (.cse6 (and (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 0 |timeShift_isLowWaterSensorDry_#res#1|) (<= |timeShift_isLowWaterLevel_~tmp~10#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0) (< 0 (+ |timeShift_isLowWaterLevel_~tmp~10#1| 1)) (<= 1 |timeShift_processEnvironment_~tmp~7#1|))) (.cse7 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse1) (or .cse5 .cse0 .cse1 .cse2) (or .cse5 .cse7 .cse0 .cse2) (or .cse7 .cse0 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7))) [2021-12-17 15:07:21,446 INFO L858 garLoopResultBuilder]: For program point L166(lines 166 170) no Hoare annotation was computed. [2021-12-17 15:07:21,446 INFO L854 garLoopResultBuilder]: At program point L166-2(lines 162 173) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse3 .cse5 .cse6) (or .cse1 .cse4 .cse3 .cse5) (or .cse1 .cse7 .cse4 .cse5) (or .cse0 .cse1 .cse7 .cse2) (or .cse7 .cse4 .cse5 .cse6))) [2021-12-17 15:07:21,446 INFO L854 garLoopResultBuilder]: At program point L662(lines 657 664) the Hoare annotation is: (let ((.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2) (or .cse5 .cse4 .cse6) (or .cse5 .cse4 .cse1) (or .cse4 .cse6 .cse0 .cse2) (or .cse6 .cse0 .cse2 .cse3))) [2021-12-17 15:07:21,447 INFO L854 garLoopResultBuilder]: At program point L819(line 819) the Hoare annotation is: (let ((.cse9 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse6 (= ~pumpRunning~0 0))) (let ((.cse3 (not (= ~systemActive~0 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse10 (and .cse9 .cse6)) (.cse7 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 (and .cse5 .cse6) .cse7 .cse1) (or .cse8 .cse0 .cse2 .cse3) (or .cse4 .cse7 .cse8 (and .cse9 .cse5 .cse6)) (or .cse10 .cse7 .cse0 .cse1 .cse2) (or (not (= |old(~waterLevel~0)| 1)) .cse10 .cse7 .cse8 .cse0)))) [2021-12-17 15:07:21,447 INFO L854 garLoopResultBuilder]: At program point L819-1(lines 800 824) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0))) (let ((.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (and (<= 1 ~waterLevel~0) .cse10)) (.cse6 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~systemActive~0 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7) (or .cse2 .cse8 .cse4 .cse5 .cse6) (or .cse0 .cse2 .cse3 .cse8 .cse4) (or .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse5) (or .cse3 .cse4 .cse6 .cse7) (or .cse9 .cse2 .cse4 .cse5 .cse10) (or .cse9 (and .cse8 .cse10) .cse2 .cse3 .cse4)))) [2021-12-17 15:07:21,447 INFO L858 garLoopResultBuilder]: For program point L753-1(lines 753 759) no Hoare annotation was computed. [2021-12-17 15:07:21,447 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 742 765) the Hoare annotation is: (let ((.cse10 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse7 (not (= ~systemActive~0 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (and .cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse9 (not (<= 1 |old(~waterLevel~0)|))) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse4 (and .cse10 (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse6 .cse7) (or .cse8 .cse4 .cse5 .cse6 .cse7) (or .cse4 .cse3 .cse5 .cse9 .cse7) (or .cse0 .cse1 .cse2 .cse6) (or .cse4 .cse2 .cse5 .cse6 .cse9) (or .cse8 .cse4 .cse2 .cse3 .cse5)))) [2021-12-17 15:07:21,447 INFO L858 garLoopResultBuilder]: For program point L943(lines 943 947) no Hoare annotation was computed. [2021-12-17 15:07:21,448 INFO L858 garLoopResultBuilder]: For program point L943-2(lines 943 947) no Hoare annotation was computed. [2021-12-17 15:07:21,448 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 742 765) no Hoare annotation was computed. [2021-12-17 15:07:21,448 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 661) no Hoare annotation was computed. [2021-12-17 15:07:21,448 INFO L854 garLoopResultBuilder]: At program point L258(lines 253 261) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (not (= ~systemActive~0 0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (and (<= 0 |timeShift_isLowWaterSensorDry_#res#1|) (<= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2) (or .cse5 .cse4 .cse1 .cse6) (or .cse4 .cse7 .cse0 .cse2) (or .cse7 .cse0 .cse2 .cse3) (or .cse5 .cse4 .cse7 .cse6))) [2021-12-17 15:07:21,448 INFO L861 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2021-12-17 15:07:21,448 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2021-12-17 15:07:21,449 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2021-12-17 15:07:21,449 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2021-12-17 15:07:21,449 INFO L861 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2021-12-17 15:07:21,449 INFO L861 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2021-12-17 15:07:21,449 INFO L858 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2021-12-17 15:07:21,449 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2021-12-17 15:07:21,449 INFO L858 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2021-12-17 15:07:21,450 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-12-17 15:07:21,450 INFO L854 garLoopResultBuilder]: At program point L700(line 700) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0 1)) (.cse1 (= ~systemActive~0 0)) (.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse5 (<= 1 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse7 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse7 .cse4) (and .cse0 .cse8 .cse2 .cse7 .cse4) (and .cse0 .cse8 .cse1 .cse2 .cse4) (and .cse0 .cse1 .cse6 .cse5 .cse4) (and .cse0 .cse2 .cse3 .cse7))) [2021-12-17 15:07:21,450 INFO L854 garLoopResultBuilder]: At program point L725(lines 678 727) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0 1)) (.cse1 (= ~systemActive~0 0)) (.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse5 (<= 1 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse7 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse7 .cse4) (and .cse0 .cse8 .cse2 .cse7 .cse4) (and .cse0 .cse8 .cse1 .cse2 .cse4) (and .cse0 .cse1 .cse6 .cse5 .cse4) (and .cse0 .cse2 .cse3 .cse7))) [2021-12-17 15:07:21,450 INFO L858 garLoopResultBuilder]: For program point L688(lines 688 694) no Hoare annotation was computed. [2021-12-17 15:07:21,450 INFO L858 garLoopResultBuilder]: For program point L688-1(lines 688 694) no Hoare annotation was computed. [2021-12-17 15:07:21,450 INFO L854 garLoopResultBuilder]: At program point L973(lines 968 975) the Hoare annotation is: (let ((.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse3 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 (<= 1 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse0 (= ~waterLevel~0 1) .cse5 .cse3 .cse4) (and .cse0 .cse5 .cse1 .cse3))) [2021-12-17 15:07:21,451 INFO L858 garLoopResultBuilder]: For program point L680(lines 680 684) no Hoare annotation was computed. [2021-12-17 15:07:21,451 INFO L854 garLoopResultBuilder]: At program point L965(lines 953 967) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 0)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3) (and .cse0 (= ~waterLevel~0 1) .cse1 .cse2 .cse3) (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) (<= 1 ~waterLevel~0) .cse3))) [2021-12-17 15:07:21,451 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:07:21,451 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:07:21,451 INFO L858 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2021-12-17 15:07:21,451 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:07:21,451 INFO L858 garLoopResultBuilder]: For program point L957-1(lines 957 963) no Hoare annotation was computed. [2021-12-17 15:07:21,452 INFO L854 garLoopResultBuilder]: At program point L1007(lines 1002 1010) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:21,452 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2021-12-17 15:07:21,452 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2021-12-17 15:07:21,452 INFO L854 garLoopResultBuilder]: At program point L999(lines 995 1001) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:21,452 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:07:21,452 INFO L861 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2021-12-17 15:07:21,453 INFO L861 garLoopResultBuilder]: At program point L731(lines 668 735) the Hoare annotation is: true [2021-12-17 15:07:21,453 INFO L858 garLoopResultBuilder]: For program point L698(lines 698 704) no Hoare annotation was computed. [2021-12-17 15:07:21,453 INFO L858 garLoopResultBuilder]: For program point L698-1(lines 698 704) no Hoare annotation was computed. [2021-12-17 15:07:21,453 INFO L861 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2021-12-17 15:07:21,453 INFO L854 garLoopResultBuilder]: At program point L690(line 690) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0 1)) (.cse1 (= ~systemActive~0 0)) (.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse5 (<= 1 ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse7 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse6 .cse7 .cse4) (and .cse0 .cse8 .cse2 .cse7 .cse4) (and .cse0 .cse8 .cse1 .cse2 .cse4) (and .cse0 .cse1 .cse6 .cse5 .cse4) (and .cse0 .cse2 .cse3 .cse7))) [2021-12-17 15:07:21,453 INFO L854 garLoopResultBuilder]: At program point L992(lines 988 994) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:21,453 INFO L854 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2021-12-17 15:07:21,454 INFO L854 garLoopResultBuilder]: At program point L728(lines 677 729) the Hoare annotation is: false [2021-12-17 15:07:21,454 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:21,454 INFO L858 garLoopResultBuilder]: For program point L716(lines 716 722) no Hoare annotation was computed. [2021-12-17 15:07:21,454 INFO L854 garLoopResultBuilder]: At program point L716-2(lines 708 723) the Hoare annotation is: (let ((.cse8 (= ~waterLevel~0 1)) (.cse4 (= ~systemActive~0 0)) (.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse3 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse1 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse6) (and .cse0 .cse8 .cse5 .cse3 .cse6) (and .cse0 .cse8 .cse4 .cse5 .cse6) (and .cse0 .cse4 .cse2 .cse7 .cse6) (and .cse0 .cse5 .cse1 .cse3))) [2021-12-17 15:07:21,454 INFO L858 garLoopResultBuilder]: For program point L679(lines 678 727) no Hoare annotation was computed. [2021-12-17 15:07:21,454 INFO L858 garLoopResultBuilder]: For program point L708(lines 708 723) no Hoare annotation was computed. [2021-12-17 15:07:21,455 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 774 798) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 (not (<= 1 ~waterLevel~0)) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse0 .cse3 .cse1 .cse2) (or .cse0 .cse3 .cse1 (not (<= 2 ~waterLevel~0)) .cse2))) [2021-12-17 15:07:21,455 INFO L854 garLoopResultBuilder]: At program point L830(lines 825 832) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2021-12-17 15:07:21,455 INFO L854 garLoopResultBuilder]: At program point L793(line 793) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0))))) [2021-12-17 15:07:21,455 INFO L854 garLoopResultBuilder]: At program point L248(lines 239 252) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~waterLevel~0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or (and (<= 2 ~waterLevel~0) .cse0) (and .cse1 .cse0) .cse2 .cse3 .cse4 (not (= ~methaneLevelCritical~0 0))) (or .cse2 .cse3 .cse5 .cse4 .cse0) (or .cse1 (not (= ~waterLevel~0 1)) .cse2 .cse5 .cse4))) [2021-12-17 15:07:21,455 INFO L858 garLoopResultBuilder]: For program point L793-1(lines 774 798) no Hoare annotation was computed. [2021-12-17 15:07:21,456 INFO L858 garLoopResultBuilder]: For program point L841(lines 841 847) no Hoare annotation was computed. [2021-12-17 15:07:21,456 INFO L854 garLoopResultBuilder]: At program point L841-2(lines 834 850) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0))) (or .cse0 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~8#1|) .cse3 (= ~pumpRunning~0 0)) .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2021-12-17 15:07:21,456 INFO L854 garLoopResultBuilder]: At program point L930(lines 915 933) the Hoare annotation is: (let ((.cse5 (<= 2 ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0))) (let ((.cse1 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (not (= 0 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1|)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) .cse6)) (.cse0 (and .cse5 .cse6)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~waterLevel~0)) (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse1 (not (= ~waterLevel~0 1)) .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse4 (not .cse5))))) [2021-12-17 15:07:21,456 INFO L854 garLoopResultBuilder]: At program point L866(lines 859 869) the Hoare annotation is: (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~waterLevel~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= ~pumpRunning~0 0))) (and (or (and .cse0 .cse1) .cse2 .cse3 .cse4 (not (= ~methaneLevelCritical~0 0))) (or .cse2 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) .cse0 .cse1)))) [2021-12-17 15:07:21,456 INFO L854 garLoopResultBuilder]: At program point L864(line 864) the Hoare annotation is: (let ((.cse4 (<= 2 ~waterLevel~0))) (let ((.cse3 (and .cse4 (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse3 .cse0 (not (<= 1 ~waterLevel~0)) .cse2 (not (= ~methaneLevelCritical~0 0))) (or .cse3 .cse0 .cse1 .cse2 (not .cse4))))) [2021-12-17 15:07:21,456 INFO L858 garLoopResultBuilder]: For program point L864-1(line 864) no Hoare annotation was computed. [2021-12-17 15:07:21,457 INFO L858 garLoopResultBuilder]: For program point L924(lines 924 928) no Hoare annotation was computed. [2021-12-17 15:07:21,457 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 774 798) no Hoare annotation was computed. [2021-12-17 15:07:21,457 INFO L858 garLoopResultBuilder]: For program point L924-2(lines 924 928) no Hoare annotation was computed. [2021-12-17 15:07:21,457 INFO L854 garLoopResultBuilder]: At program point L788(line 788) the Hoare annotation is: (let ((.cse0 (and (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0))))) [2021-12-17 15:07:21,457 INFO L858 garLoopResultBuilder]: For program point L243(lines 243 249) no Hoare annotation was computed. [2021-12-17 15:07:21,457 INFO L858 garLoopResultBuilder]: For program point L782(lines 782 790) no Hoare annotation was computed. [2021-12-17 15:07:21,458 INFO L858 garLoopResultBuilder]: For program point L778(lines 778 795) no Hoare annotation was computed. [2021-12-17 15:07:21,458 INFO L858 garLoopResultBuilder]: For program point L178-1(lines 174 185) no Hoare annotation was computed. [2021-12-17 15:07:21,458 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 174 185) no Hoare annotation was computed. [2021-12-17 15:07:21,458 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 174 185) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= ~systemActive~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse3 .cse6) (or .cse7 .cse1 .cse2 .cse3) (or .cse0 .cse8 .cse2 .cse4 .cse6) (or .cse5 .cse0 .cse1 .cse8 .cse2) (or .cse7 .cse0 .cse2 .cse3 .cse6) (or .cse7 .cse0 .cse1 .cse8 .cse2))) [2021-12-17 15:07:21,461 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:21,462 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:07:21,489 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:07:21 BoogieIcfgContainer [2021-12-17 15:07:21,489 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:07:21,490 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:07:21,490 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:07:21,491 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:07:21,491 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:07:10" (3/4) ... [2021-12-17 15:07:21,502 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:07:21,507 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-17 15:07:21,508 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:07:21,508 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:07:21,508 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-17 15:07:21,509 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:07:21,509 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:07:21,509 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:07:21,509 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:07:21,516 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-17 15:07:21,519 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:07:21,519 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:07:21,519 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:07:21,520 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:07:21,520 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:07:21,521 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:07:21,542 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) [2021-12-17 15:07:21,543 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((!(1 == systemActive) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && ((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || pumpRunning == 0)) && ((((!(\old(waterLevel) == 1) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:07:21,544 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((!(1 == systemActive) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((((tmp == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0))) && ((((!(2 <= \old(waterLevel)) || (tmp == 0 && 2 <= waterLevel)) || !(1 == systemActive)) || ((tmp == 0 && 1 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) [2021-12-17 15:07:21,545 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((methaneLevelCritical <= \result && 2 <= waterLevel) && pumpRunning == 0)) [2021-12-17 15:07:21,545 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || ((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && ((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 <= methaneLevelCritical) || ((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(2 <= \old(waterLevel)) || ((\result == 0 && 1 <= waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) [2021-12-17 15:07:21,545 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((0 <= \result && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((0 <= \result && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel)) [2021-12-17 15:07:21,545 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || (((methaneLevelCritical <= \result && methaneLevelCritical <= tmp) && 2 <= waterLevel) && pumpRunning == 0)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:07:21,545 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((2 <= waterLevel && pumpRunning == 0) || (!(\result == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0)) && ((((!(\result == 0) || !(waterLevel == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:07:21,546 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:07:21,546 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && ((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) [2021-12-17 15:07:21,546 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((((1 <= tmp___0 && 0 <= \result) && tmp <= 0) && 1 <= \result) && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel) && 0 < tmp + 1))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || (((((((1 <= tmp___0 && 0 <= \result) && tmp <= 0) && 1 <= \result) && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel) && 0 < tmp + 1)) || !(methaneLevelCritical == 0))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) [2021-12-17 15:07:21,546 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((2 <= waterLevel && pumpRunning == 0) || (((\result == 0 && !(0 == tmp)) && tmp___0 == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) && (((((((\result == 0 && !(0 == tmp)) && tmp___0 == 0) && pumpRunning == 0) || !(waterLevel == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(2 <= waterLevel)) [2021-12-17 15:07:21,590 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:07:21,590 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:07:21,591 INFO L158 Benchmark]: Toolchain (without parser) took 12023.07ms. Allocated memory was 109.1MB in the beginning and 234.9MB in the end (delta: 125.8MB). Free memory was 79.7MB in the beginning and 178.1MB in the end (delta: -98.4MB). Peak memory consumption was 28.5MB. Max. memory is 16.1GB. [2021-12-17 15:07:21,591 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 109.1MB. Free memory is still 66.5MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:07:21,592 INFO L158 Benchmark]: CACSL2BoogieTranslator took 395.82ms. Allocated memory is still 109.1MB. Free memory was 79.4MB in the beginning and 74.4MB in the end (delta: 5.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-17 15:07:21,592 INFO L158 Benchmark]: Boogie Procedure Inliner took 59.86ms. Allocated memory is still 109.1MB. Free memory was 74.4MB in the beginning and 72.0MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:07:21,593 INFO L158 Benchmark]: Boogie Preprocessor took 29.96ms. Allocated memory is still 109.1MB. Free memory was 72.0MB in the beginning and 70.3MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:07:21,593 INFO L158 Benchmark]: RCFGBuilder took 491.07ms. Allocated memory was 109.1MB in the beginning and 134.2MB in the end (delta: 25.2MB). Free memory was 70.3MB in the beginning and 108.6MB in the end (delta: -38.3MB). Peak memory consumption was 22.2MB. Max. memory is 16.1GB. [2021-12-17 15:07:21,594 INFO L158 Benchmark]: TraceAbstraction took 10939.38ms. Allocated memory was 134.2MB in the beginning and 234.9MB in the end (delta: 100.7MB). Free memory was 108.6MB in the beginning and 185.4MB in the end (delta: -76.8MB). Peak memory consumption was 116.8MB. Max. memory is 16.1GB. [2021-12-17 15:07:21,594 INFO L158 Benchmark]: Witness Printer took 100.42ms. Allocated memory is still 234.9MB. Free memory was 185.4MB in the beginning and 178.1MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-17 15:07:21,596 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 109.1MB. Free memory is still 66.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 395.82ms. Allocated memory is still 109.1MB. Free memory was 79.4MB in the beginning and 74.4MB in the end (delta: 5.0MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 59.86ms. Allocated memory is still 109.1MB. Free memory was 74.4MB in the beginning and 72.0MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 29.96ms. Allocated memory is still 109.1MB. Free memory was 72.0MB in the beginning and 70.3MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 491.07ms. Allocated memory was 109.1MB in the beginning and 134.2MB in the end (delta: 25.2MB). Free memory was 70.3MB in the beginning and 108.6MB in the end (delta: -38.3MB). Peak memory consumption was 22.2MB. Max. memory is 16.1GB. * TraceAbstraction took 10939.38ms. Allocated memory was 134.2MB in the beginning and 234.9MB in the end (delta: 100.7MB). Free memory was 108.6MB in the beginning and 185.4MB in the end (delta: -76.8MB). Peak memory consumption was 116.8MB. Max. memory is 16.1GB. * Witness Printer took 100.42ms. Allocated memory is still 234.9MB. Free memory was 185.4MB in the beginning and 178.1MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 661]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 99 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 10.8s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.7s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1871 SdHoareTripleChecker+Valid, 1.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1836 mSDsluCounter, 4143 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2627 mSDsCounter, 569 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1591 IncrementalHoareTripleChecker+Invalid, 2160 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 569 mSolverCounterUnsat, 1516 mSDtfsCounter, 1591 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 471 GetRequests, 359 SyntacticMatches, 4 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 150 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1178occurred in iteration=11, InterpolantAutomatonStates: 93, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 391 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 3087 PreInvPairs, 3323 NumberOfFragments, 3114 HoareAnnotationTreeSize, 3087 FomulaSimplifications, 2341 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 46 FomulaSimplificationsInter, 12130 FormulaSimplificationTreeSizeReductionInter, 4.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 905 NumberOfCodeBlocks, 905 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 890 ConstructedInterpolants, 0 QuantifiedInterpolants, 1517 SizeOfPredicates, 12 NumberOfNonLiveVariables, 1323 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 156/164 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 678]: Loop Invariant Derived loop invariant: ((((((((splverifierCounter == 0 && systemActive == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 <= waterLevel) && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0)) || ((((splverifierCounter == 0 && waterLevel == 1) && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0)) || ((((splverifierCounter == 0 && waterLevel == 1) && systemActive == 0) && methaneLevelCritical == 0) && pumpRunning == 0)) || ((((splverifierCounter == 0 && systemActive == 0) && 1 <= methaneLevelCritical) && 1 <= waterLevel) && pumpRunning == 0)) || (((splverifierCounter == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && systemActive == 1) - InvariantResult [Line: 859]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || ((methaneLevelCritical <= \result && 2 <= waterLevel) && pumpRunning == 0)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 953]: Loop Invariant Derived loop invariant: (((((splverifierCounter == 0 && systemActive == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && pumpRunning == 0) || ((((splverifierCounter == 0 && waterLevel == 1) && systemActive == 0) && methaneLevelCritical == 0) && pumpRunning == 0)) || ((((splverifierCounter == 0 && systemActive == 0) && 1 <= methaneLevelCritical) && 1 <= waterLevel) && pumpRunning == 0) - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || ((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && ((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(1 <= methaneLevelCritical) || ((\result == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(2 <= \old(waterLevel)) || ((\result == 0 && 1 <= waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((((1 <= tmp___0 && 0 <= \result) && tmp <= 0) && 1 <= \result) && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel) && 0 < tmp + 1))) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || (((((((1 <= tmp___0 && 0 <= \result) && tmp <= 0) && 1 <= \result) && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel) && 0 < tmp + 1)) || !(methaneLevelCritical == 0))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((0 <= \result && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && (((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((0 <= \result && \result <= 0) && pumpRunning == \old(pumpRunning)) && 1 <= waterLevel)) - InvariantResult [Line: 915]: Loop Invariant Derived loop invariant: (((((((2 <= waterLevel && pumpRunning == 0) || (((\result == 0 && !(0 == tmp)) && tmp___0 == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) && (((((((\result == 0 && !(0 == tmp)) && tmp___0 == 0) && pumpRunning == 0) || !(waterLevel == 1)) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(2 <= waterLevel)) - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || (((methaneLevelCritical <= \result && methaneLevelCritical <= tmp) && 2 <= waterLevel) && pumpRunning == 0)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 825]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && (((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 988]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: (((((splverifierCounter == 0 && 2 <= waterLevel) && 1 <= methaneLevelCritical) && systemActive == 1) || ((((splverifierCounter == 0 && 1 <= waterLevel) && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0)) || ((((splverifierCounter == 0 && waterLevel == 1) && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0)) || (((splverifierCounter == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && systemActive == 1) - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) && (((!(1 == systemActive) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && ((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0)) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: ((((((((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((!(1 == systemActive) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && (((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel)))) && (((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((((tmp == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0))) && ((((!(2 <= \old(waterLevel)) || (tmp == 0 && 2 <= waterLevel)) || !(1 == systemActive)) || ((tmp == 0 && 1 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: (((((((2 <= waterLevel && pumpRunning == 0) || (!(\result == 0) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || pumpRunning == 0)) && ((((!(\result == 0) || !(waterLevel == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 800]: Loop Invariant Derived loop invariant: (((((((((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((!(1 == systemActive) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(1 <= \old(waterLevel)))) && ((((!(2 <= \old(waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0))) && ((((!(2 <= \old(waterLevel)) || (1 <= waterLevel && pumpRunning == 0)) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 <= \old(waterLevel))) || !(systemActive == 0))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || pumpRunning == 0)) && ((((!(\old(waterLevel) == 1) || (waterLevel == \old(waterLevel) && pumpRunning == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) RESULT: Ultimate proved your program to be correct! [2021-12-17 15:07:21,659 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE