./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f250833677b07ed1377ed852c7268af3b652ab26de7f7fe1fca27ae75baf167f --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 00:58:43,080 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 00:58:43,082 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 00:58:43,136 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 00:58:43,136 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 00:58:43,138 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 00:58:43,140 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 00:58:43,143 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 00:58:43,146 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 00:58:43,147 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 00:58:43,148 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 00:58:43,149 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 00:58:43,149 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 00:58:43,152 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 00:58:43,154 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 00:58:43,155 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 00:58:43,157 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 00:58:43,158 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 00:58:43,159 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 00:58:43,160 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 00:58:43,163 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 00:58:43,164 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 00:58:43,164 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 00:58:43,165 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 00:58:43,169 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 00:58:43,171 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 00:58:43,172 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 00:58:43,172 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 00:58:43,173 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 00:58:43,174 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 00:58:43,174 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 00:58:43,174 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 00:58:43,175 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 00:58:43,176 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 00:58:43,177 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 00:58:43,177 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 00:58:43,178 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 00:58:43,178 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 00:58:43,178 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 00:58:43,178 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 00:58:43,179 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 00:58:43,180 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 00:58:43,204 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 00:58:43,207 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 00:58:43,208 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 00:58:43,208 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 00:58:43,209 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 00:58:43,209 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 00:58:43,209 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 00:58:43,209 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 00:58:43,209 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 00:58:43,210 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 00:58:43,210 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 00:58:43,210 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 00:58:43,210 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 00:58:43,211 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 00:58:43,211 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 00:58:43,211 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 00:58:43,211 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 00:58:43,211 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 00:58:43,211 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 00:58:43,211 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 00:58:43,212 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 00:58:43,212 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 00:58:43,212 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 00:58:43,212 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 00:58:43,212 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:58:43,212 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 00:58:43,212 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 00:58:43,213 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 00:58:43,213 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 00:58:43,214 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 00:58:43,214 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 00:58:43,214 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 00:58:43,214 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 00:58:43,214 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 00:58:43,214 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f250833677b07ed1377ed852c7268af3b652ab26de7f7fe1fca27ae75baf167f [2021-12-16 00:58:43,377 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 00:58:43,392 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 00:58:43,395 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 00:58:43,396 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 00:58:43,396 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 00:58:43,397 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c [2021-12-16 00:58:43,440 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4849b8960/bd8bcbb3adec4664a3e419b4009d3c28/FLAGa234ca64c [2021-12-16 00:58:43,900 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 00:58:43,900 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c [2021-12-16 00:58:43,914 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4849b8960/bd8bcbb3adec4664a3e419b4009d3c28/FLAGa234ca64c [2021-12-16 00:58:44,275 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4849b8960/bd8bcbb3adec4664a3e419b4009d3c28 [2021-12-16 00:58:44,277 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 00:58:44,279 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 00:58:44,281 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 00:58:44,281 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 00:58:44,283 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 00:58:44,284 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:58:44" (1/1) ... [2021-12-16 00:58:44,284 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@359ddfa3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:44, skipping insertion in model container [2021-12-16 00:58:44,285 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:58:44" (1/1) ... [2021-12-16 00:58:44,289 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 00:58:44,322 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 00:58:44,530 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c[3777,3790] [2021-12-16 00:58:44,632 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:58:44,639 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 00:58:44,652 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product61.cil.c[3777,3790] [2021-12-16 00:58:44,694 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:58:44,706 INFO L208 MainTranslator]: Completed translation [2021-12-16 00:58:44,706 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:44 WrapperNode [2021-12-16 00:58:44,707 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 00:58:44,708 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 00:58:44,709 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 00:58:44,709 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 00:58:44,713 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:44" (1/1) ... [2021-12-16 00:58:44,731 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:44" (1/1) ... [2021-12-16 00:58:44,763 INFO L137 Inliner]: procedures = 57, calls = 160, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 268 [2021-12-16 00:58:44,764 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 00:58:44,765 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 00:58:44,765 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 00:58:44,765 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 00:58:44,771 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:44" (1/1) ... [2021-12-16 00:58:44,771 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:44" (1/1) ... [2021-12-16 00:58:44,781 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:44" (1/1) ... [2021-12-16 00:58:44,781 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:44" (1/1) ... [2021-12-16 00:58:44,792 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:44" (1/1) ... [2021-12-16 00:58:44,802 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:44" (1/1) ... [2021-12-16 00:58:44,803 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:44" (1/1) ... [2021-12-16 00:58:44,805 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 00:58:44,805 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 00:58:44,813 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 00:58:44,813 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 00:58:44,814 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:44" (1/1) ... [2021-12-16 00:58:44,819 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:58:44,829 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:58:44,840 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 00:58:44,845 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 00:58:44,876 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 00:58:44,877 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 00:58:44,877 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 00:58:44,877 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 00:58:44,878 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 00:58:44,878 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 00:58:44,878 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 00:58:44,881 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-16 00:58:44,881 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-16 00:58:44,882 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:58:44,882 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:58:44,882 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 00:58:44,882 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 00:58:44,882 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-16 00:58:44,882 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-16 00:58:44,882 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-16 00:58:44,883 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-16 00:58:44,883 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-16 00:58:44,883 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-16 00:58:44,883 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 00:58:44,883 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 00:58:44,883 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 00:58:44,883 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 00:58:44,883 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 00:58:44,932 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 00:58:44,933 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 00:58:45,179 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 00:58:45,187 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 00:58:45,190 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 00:58:45,191 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:58:45 BoogieIcfgContainer [2021-12-16 00:58:45,192 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 00:58:45,193 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 00:58:45,193 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 00:58:45,196 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 00:58:45,196 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 12:58:44" (1/3) ... [2021-12-16 00:58:45,197 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6ba5e08f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:58:45, skipping insertion in model container [2021-12-16 00:58:45,197 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:58:44" (2/3) ... [2021-12-16 00:58:45,197 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6ba5e08f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:58:45, skipping insertion in model container [2021-12-16 00:58:45,197 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:58:45" (3/3) ... [2021-12-16 00:58:45,198 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product61.cil.c [2021-12-16 00:58:45,202 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 00:58:45,202 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 00:58:45,244 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 00:58:45,250 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 00:58:45,251 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 00:58:45,272 INFO L276 IsEmpty]: Start isEmpty. Operand has 108 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-12-16 00:58:45,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2021-12-16 00:58:45,283 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:45,284 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:45,284 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:45,288 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:45,288 INFO L85 PathProgramCache]: Analyzing trace with hash 1854857434, now seen corresponding path program 1 times [2021-12-16 00:58:45,294 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:45,294 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1028081065] [2021-12-16 00:58:45,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:45,296 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:45,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:58:45,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,425 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:45,426 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:45,426 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1028081065] [2021-12-16 00:58:45,427 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1028081065] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:45,427 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:45,427 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 00:58:45,428 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1924162689] [2021-12-16 00:58:45,429 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:45,432 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 00:58:45,432 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:45,452 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 00:58:45,453 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:58:45,456 INFO L87 Difference]: Start difference. First operand has 108 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:45,495 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:45,495 INFO L93 Difference]: Finished difference Result 208 states and 281 transitions. [2021-12-16 00:58:45,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 00:58:45,508 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2021-12-16 00:58:45,509 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:45,527 INFO L225 Difference]: With dead ends: 208 [2021-12-16 00:58:45,527 INFO L226 Difference]: Without dead ends: 99 [2021-12-16 00:58:45,530 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:58:45,532 INFO L933 BasicCegarLoop]: 137 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:45,548 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:58:45,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2021-12-16 00:58:45,593 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 99. [2021-12-16 00:58:45,594 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 99 states, 71 states have (on average 1.3098591549295775) internal successors, (93), 80 states have internal predecessors, (93), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2021-12-16 00:58:45,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 128 transitions. [2021-12-16 00:58:45,596 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 128 transitions. Word has length 23 [2021-12-16 00:58:45,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:45,597 INFO L470 AbstractCegarLoop]: Abstraction has 99 states and 128 transitions. [2021-12-16 00:58:45,597 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:45,597 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 128 transitions. [2021-12-16 00:58:45,599 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2021-12-16 00:58:45,600 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:45,601 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:45,601 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 00:58:45,601 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:45,602 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:45,602 INFO L85 PathProgramCache]: Analyzing trace with hash 1310134844, now seen corresponding path program 1 times [2021-12-16 00:58:45,603 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:45,603 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [585054283] [2021-12-16 00:58:45,603 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:45,603 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:45,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 00:58:45,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,665 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:45,665 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:45,665 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [585054283] [2021-12-16 00:58:45,665 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [585054283] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:45,665 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:45,666 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:58:45,666 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [236699833] [2021-12-16 00:58:45,666 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:45,667 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:58:45,667 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:45,667 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:58:45,667 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:58:45,668 INFO L87 Difference]: Start difference. First operand 99 states and 128 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:45,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:45,679 INFO L93 Difference]: Finished difference Result 164 states and 212 transitions. [2021-12-16 00:58:45,679 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:58:45,680 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2021-12-16 00:58:45,680 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:45,681 INFO L225 Difference]: With dead ends: 164 [2021-12-16 00:58:45,681 INFO L226 Difference]: Without dead ends: 90 [2021-12-16 00:58:45,681 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:58:45,682 INFO L933 BasicCegarLoop]: 115 mSDtfsCounter, 12 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:45,683 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 214 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:58:45,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2021-12-16 00:58:45,693 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2021-12-16 00:58:45,693 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 65 states have (on average 1.323076923076923) internal successors, (86), 74 states have internal predecessors, (86), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-16 00:58:45,696 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 116 transitions. [2021-12-16 00:58:45,696 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 116 transitions. Word has length 24 [2021-12-16 00:58:45,696 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:45,697 INFO L470 AbstractCegarLoop]: Abstraction has 90 states and 116 transitions. [2021-12-16 00:58:45,698 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:45,698 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 116 transitions. [2021-12-16 00:58:45,699 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2021-12-16 00:58:45,700 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:45,700 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:45,701 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 00:58:45,701 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:45,701 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:45,705 INFO L85 PathProgramCache]: Analyzing trace with hash 2011182624, now seen corresponding path program 1 times [2021-12-16 00:58:45,705 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:45,705 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [403233796] [2021-12-16 00:58:45,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:45,706 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:45,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 00:58:45,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,785 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:45,785 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:45,786 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [403233796] [2021-12-16 00:58:45,786 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [403233796] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:45,786 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:45,786 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:58:45,787 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1884069357] [2021-12-16 00:58:45,787 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:45,787 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:58:45,788 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:45,788 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:58:45,788 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:58:45,788 INFO L87 Difference]: Start difference. First operand 90 states and 116 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:45,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:45,806 INFO L93 Difference]: Finished difference Result 173 states and 226 transitions. [2021-12-16 00:58:45,806 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:58:45,806 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2021-12-16 00:58:45,807 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:45,809 INFO L225 Difference]: With dead ends: 173 [2021-12-16 00:58:45,809 INFO L226 Difference]: Without dead ends: 90 [2021-12-16 00:58:45,809 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:58:45,810 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 98 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 98 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:45,811 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [98 Valid, 114 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:58:45,811 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2021-12-16 00:58:45,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2021-12-16 00:58:45,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 74 states have internal predecessors, (85), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-16 00:58:45,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 115 transitions. [2021-12-16 00:58:45,819 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 115 transitions. Word has length 28 [2021-12-16 00:58:45,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:45,819 INFO L470 AbstractCegarLoop]: Abstraction has 90 states and 115 transitions. [2021-12-16 00:58:45,819 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:58:45,820 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 115 transitions. [2021-12-16 00:58:45,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2021-12-16 00:58:45,821 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:45,821 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:45,821 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 00:58:45,821 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:45,821 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:45,822 INFO L85 PathProgramCache]: Analyzing trace with hash -1454995953, now seen corresponding path program 1 times [2021-12-16 00:58:45,822 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:45,822 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [60061015] [2021-12-16 00:58:45,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:45,822 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:45,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 00:58:45,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:58:45,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:58:45,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-16 00:58:45,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:45,886 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:45,886 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:45,886 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [60061015] [2021-12-16 00:58:45,886 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [60061015] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:45,887 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:45,887 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 00:58:45,887 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [621518683] [2021-12-16 00:58:45,887 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:45,887 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-16 00:58:45,888 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:45,888 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 00:58:45,888 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 00:58:45,888 INFO L87 Difference]: Start difference. First operand 90 states and 115 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 00:58:46,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:46,075 INFO L93 Difference]: Finished difference Result 258 states and 327 transitions. [2021-12-16 00:58:46,075 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:58:46,075 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 43 [2021-12-16 00:58:46,076 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:46,079 INFO L225 Difference]: With dead ends: 258 [2021-12-16 00:58:46,079 INFO L226 Difference]: Without dead ends: 175 [2021-12-16 00:58:46,081 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-16 00:58:46,088 INFO L933 BasicCegarLoop]: 142 mSDtfsCounter, 198 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 200 SdHoareTripleChecker+Valid, 315 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:46,089 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [200 Valid, 315 Invalid, 202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:58:46,091 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175 states. [2021-12-16 00:58:46,107 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175 to 169. [2021-12-16 00:58:46,111 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 123 states have (on average 1.2357723577235773) internal successors, (152), 132 states have internal predecessors, (152), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2021-12-16 00:58:46,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 203 transitions. [2021-12-16 00:58:46,113 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 203 transitions. Word has length 43 [2021-12-16 00:58:46,113 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:46,113 INFO L470 AbstractCegarLoop]: Abstraction has 169 states and 203 transitions. [2021-12-16 00:58:46,114 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2021-12-16 00:58:46,114 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 203 transitions. [2021-12-16 00:58:46,117 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2021-12-16 00:58:46,117 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:46,117 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:46,117 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 00:58:46,118 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:46,118 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:46,118 INFO L85 PathProgramCache]: Analyzing trace with hash 541296903, now seen corresponding path program 1 times [2021-12-16 00:58:46,119 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:46,119 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1099924749] [2021-12-16 00:58:46,121 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:46,121 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:46,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 00:58:46,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:58:46,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:46,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-16 00:58:46,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,206 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:46,206 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:46,207 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1099924749] [2021-12-16 00:58:46,207 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1099924749] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:46,207 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:46,207 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:58:46,207 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1541195509] [2021-12-16 00:58:46,207 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:46,208 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:58:46,208 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:46,208 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:58:46,220 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:58:46,220 INFO L87 Difference]: Start difference. First operand 169 states and 203 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:58:46,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:46,572 INFO L93 Difference]: Finished difference Result 497 states and 607 transitions. [2021-12-16 00:58:46,572 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-16 00:58:46,573 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2021-12-16 00:58:46,573 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:46,575 INFO L225 Difference]: With dead ends: 497 [2021-12-16 00:58:46,575 INFO L226 Difference]: Without dead ends: 335 [2021-12-16 00:58:46,575 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-16 00:58:46,576 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 187 mSDsluCounter, 383 mSDsCounter, 0 mSdLazyCounter, 257 mSolverCounterSat, 71 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 490 SdHoareTripleChecker+Invalid, 328 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 71 IncrementalHoareTripleChecker+Valid, 257 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:46,576 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [196 Valid, 490 Invalid, 328 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [71 Valid, 257 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-16 00:58:46,577 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 335 states. [2021-12-16 00:58:46,610 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 335 to 321. [2021-12-16 00:58:46,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 321 states, 230 states have (on average 1.208695652173913) internal successors, (278), 247 states have internal predecessors, (278), 44 states have call successors, (44), 36 states have call predecessors, (44), 46 states have return successors, (60), 48 states have call predecessors, (60), 44 states have call successors, (60) [2021-12-16 00:58:46,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 321 states to 321 states and 382 transitions. [2021-12-16 00:58:46,613 INFO L78 Accepts]: Start accepts. Automaton has 321 states and 382 transitions. Word has length 49 [2021-12-16 00:58:46,613 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:46,613 INFO L470 AbstractCegarLoop]: Abstraction has 321 states and 382 transitions. [2021-12-16 00:58:46,613 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2021-12-16 00:58:46,613 INFO L276 IsEmpty]: Start isEmpty. Operand 321 states and 382 transitions. [2021-12-16 00:58:46,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2021-12-16 00:58:46,614 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:46,615 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:46,615 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 00:58:46,615 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:46,615 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:46,616 INFO L85 PathProgramCache]: Analyzing trace with hash -1862969789, now seen corresponding path program 1 times [2021-12-16 00:58:46,616 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:46,616 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1510044714] [2021-12-16 00:58:46,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:46,616 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:46,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 00:58:46,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-16 00:58:46,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:58:46,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:46,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2021-12-16 00:58:46,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:46,747 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:46,748 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:46,748 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1510044714] [2021-12-16 00:58:46,748 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1510044714] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:46,748 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:46,748 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:58:46,749 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [304139611] [2021-12-16 00:58:46,749 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:46,749 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:58:46,749 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:46,750 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:58:46,750 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:58:46,750 INFO L87 Difference]: Start difference. First operand 321 states and 382 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 00:58:47,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:47,113 INFO L93 Difference]: Finished difference Result 337 states and 398 transitions. [2021-12-16 00:58:47,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-16 00:58:47,114 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) Word has length 53 [2021-12-16 00:58:47,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:47,116 INFO L225 Difference]: With dead ends: 337 [2021-12-16 00:58:47,116 INFO L226 Difference]: Without dead ends: 335 [2021-12-16 00:58:47,116 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2021-12-16 00:58:47,117 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 213 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 386 mSolverCounterSat, 89 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 215 SdHoareTripleChecker+Valid, 259 SdHoareTripleChecker+Invalid, 475 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 89 IncrementalHoareTripleChecker+Valid, 386 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:47,117 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [215 Valid, 259 Invalid, 475 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [89 Valid, 386 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-16 00:58:47,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 335 states. [2021-12-16 00:58:47,149 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 335 to 321. [2021-12-16 00:58:47,150 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 321 states, 230 states have (on average 1.2) internal successors, (276), 247 states have internal predecessors, (276), 44 states have call successors, (44), 36 states have call predecessors, (44), 46 states have return successors, (60), 48 states have call predecessors, (60), 44 states have call successors, (60) [2021-12-16 00:58:47,164 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 321 states to 321 states and 380 transitions. [2021-12-16 00:58:47,165 INFO L78 Accepts]: Start accepts. Automaton has 321 states and 380 transitions. Word has length 53 [2021-12-16 00:58:47,165 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:47,165 INFO L470 AbstractCegarLoop]: Abstraction has 321 states and 380 transitions. [2021-12-16 00:58:47,165 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 00:58:47,166 INFO L276 IsEmpty]: Start isEmpty. Operand 321 states and 380 transitions. [2021-12-16 00:58:47,167 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-12-16 00:58:47,167 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:47,167 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:47,167 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-16 00:58:47,167 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:47,167 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:47,167 INFO L85 PathProgramCache]: Analyzing trace with hash -271952337, now seen corresponding path program 1 times [2021-12-16 00:58:47,167 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:47,168 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1392626116] [2021-12-16 00:58:47,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:47,168 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:47,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 00:58:47,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-16 00:58:47,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:58:47,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:47,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:58:47,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-12-16 00:58:47,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,278 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:58:47,278 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:47,278 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1392626116] [2021-12-16 00:58:47,279 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1392626116] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:47,279 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:47,279 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:58:47,279 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [245596558] [2021-12-16 00:58:47,279 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:47,279 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:58:47,280 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:47,280 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:58:47,280 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:58:47,280 INFO L87 Difference]: Start difference. First operand 321 states and 380 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 00:58:47,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:47,531 INFO L93 Difference]: Finished difference Result 653 states and 790 transitions. [2021-12-16 00:58:47,531 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 00:58:47,532 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 63 [2021-12-16 00:58:47,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:47,533 INFO L225 Difference]: With dead ends: 653 [2021-12-16 00:58:47,533 INFO L226 Difference]: Without dead ends: 339 [2021-12-16 00:58:47,534 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:58:47,535 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 146 mSDsluCounter, 157 mSDsCounter, 0 mSdLazyCounter, 322 mSolverCounterSat, 69 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 255 SdHoareTripleChecker+Invalid, 391 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 69 IncrementalHoareTripleChecker+Valid, 322 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:47,535 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [147 Valid, 255 Invalid, 391 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [69 Valid, 322 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:58:47,536 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 339 states. [2021-12-16 00:58:47,546 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 339 to 327. [2021-12-16 00:58:47,547 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 327 states, 236 states have (on average 1.194915254237288) internal successors, (282), 253 states have internal predecessors, (282), 44 states have call successors, (44), 36 states have call predecessors, (44), 46 states have return successors, (60), 48 states have call predecessors, (60), 44 states have call successors, (60) [2021-12-16 00:58:47,548 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 327 states to 327 states and 386 transitions. [2021-12-16 00:58:47,548 INFO L78 Accepts]: Start accepts. Automaton has 327 states and 386 transitions. Word has length 63 [2021-12-16 00:58:47,549 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:47,549 INFO L470 AbstractCegarLoop]: Abstraction has 327 states and 386 transitions. [2021-12-16 00:58:47,549 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 00:58:47,549 INFO L276 IsEmpty]: Start isEmpty. Operand 327 states and 386 transitions. [2021-12-16 00:58:47,550 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-12-16 00:58:47,550 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:47,550 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:47,550 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-16 00:58:47,550 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:47,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:47,551 INFO L85 PathProgramCache]: Analyzing trace with hash 2807277, now seen corresponding path program 1 times [2021-12-16 00:58:47,551 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:47,551 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [330617102] [2021-12-16 00:58:47,551 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:47,551 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:47,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 00:58:47,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-16 00:58:47,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:58:47,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:47,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:58:47,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-12-16 00:58:47,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,619 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:58:47,619 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:47,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [330617102] [2021-12-16 00:58:47,619 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [330617102] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:47,619 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:47,620 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:58:47,620 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [590435999] [2021-12-16 00:58:47,620 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:47,620 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:58:47,620 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:47,621 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:58:47,621 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:58:47,621 INFO L87 Difference]: Start difference. First operand 327 states and 386 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 00:58:47,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:47,822 INFO L93 Difference]: Finished difference Result 665 states and 802 transitions. [2021-12-16 00:58:47,822 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:58:47,823 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 63 [2021-12-16 00:58:47,823 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:47,824 INFO L225 Difference]: With dead ends: 665 [2021-12-16 00:58:47,824 INFO L226 Difference]: Without dead ends: 345 [2021-12-16 00:58:47,825 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-16 00:58:47,825 INFO L933 BasicCegarLoop]: 99 mSDtfsCounter, 149 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 236 mSolverCounterSat, 64 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 150 SdHoareTripleChecker+Valid, 217 SdHoareTripleChecker+Invalid, 300 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 64 IncrementalHoareTripleChecker+Valid, 236 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:47,826 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [150 Valid, 217 Invalid, 300 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [64 Valid, 236 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:58:47,826 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 345 states. [2021-12-16 00:58:47,835 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 345 to 331. [2021-12-16 00:58:47,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 331 states, 240 states have (on average 1.1916666666666667) internal successors, (286), 257 states have internal predecessors, (286), 44 states have call successors, (44), 36 states have call predecessors, (44), 46 states have return successors, (60), 48 states have call predecessors, (60), 44 states have call successors, (60) [2021-12-16 00:58:47,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 331 states to 331 states and 390 transitions. [2021-12-16 00:58:47,837 INFO L78 Accepts]: Start accepts. Automaton has 331 states and 390 transitions. Word has length 63 [2021-12-16 00:58:47,838 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:47,838 INFO L470 AbstractCegarLoop]: Abstraction has 331 states and 390 transitions. [2021-12-16 00:58:47,838 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 00:58:47,838 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 390 transitions. [2021-12-16 00:58:47,839 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2021-12-16 00:58:47,839 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:47,839 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:47,839 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-16 00:58:47,839 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:47,839 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:47,840 INFO L85 PathProgramCache]: Analyzing trace with hash 2053791275, now seen corresponding path program 1 times [2021-12-16 00:58:47,840 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:47,840 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1886026134] [2021-12-16 00:58:47,840 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:47,840 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:47,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-12-16 00:58:47,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2021-12-16 00:58:47,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:58:47,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:47,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:58:47,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-12-16 00:58:47,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:47,893 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:58:47,893 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:47,893 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1886026134] [2021-12-16 00:58:47,893 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1886026134] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:47,893 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:58:47,893 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:58:47,894 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [119032400] [2021-12-16 00:58:47,894 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:47,894 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:58:47,894 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:47,894 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:58:47,895 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:58:47,895 INFO L87 Difference]: Start difference. First operand 331 states and 390 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 4 states have call successors, (6) [2021-12-16 00:58:48,214 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:48,214 INFO L93 Difference]: Finished difference Result 897 states and 1118 transitions. [2021-12-16 00:58:48,214 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-16 00:58:48,215 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 4 states have call successors, (6) Word has length 63 [2021-12-16 00:58:48,215 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:48,217 INFO L225 Difference]: With dead ends: 897 [2021-12-16 00:58:48,217 INFO L226 Difference]: Without dead ends: 573 [2021-12-16 00:58:48,218 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 17 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:58:48,219 INFO L933 BasicCegarLoop]: 145 mSDtfsCounter, 332 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 298 mSolverCounterSat, 154 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 334 SdHoareTripleChecker+Valid, 266 SdHoareTripleChecker+Invalid, 452 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 154 IncrementalHoareTripleChecker+Valid, 298 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:48,219 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [334 Valid, 266 Invalid, 452 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [154 Valid, 298 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-16 00:58:48,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 573 states. [2021-12-16 00:58:48,235 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 573 to 571. [2021-12-16 00:58:48,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 571 states, 416 states have (on average 1.1850961538461537) internal successors, (493), 441 states have internal predecessors, (493), 78 states have call successors, (78), 70 states have call predecessors, (78), 76 states have return successors, (121), 80 states have call predecessors, (121), 78 states have call successors, (121) [2021-12-16 00:58:48,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 571 states to 571 states and 692 transitions. [2021-12-16 00:58:48,239 INFO L78 Accepts]: Start accepts. Automaton has 571 states and 692 transitions. Word has length 63 [2021-12-16 00:58:48,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:48,239 INFO L470 AbstractCegarLoop]: Abstraction has 571 states and 692 transitions. [2021-12-16 00:58:48,239 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 4 states have call successors, (6) [2021-12-16 00:58:48,239 INFO L276 IsEmpty]: Start isEmpty. Operand 571 states and 692 transitions. [2021-12-16 00:58:48,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2021-12-16 00:58:48,240 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:48,240 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:48,241 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-16 00:58:48,241 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:48,241 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:48,241 INFO L85 PathProgramCache]: Analyzing trace with hash 1528982533, now seen corresponding path program 1 times [2021-12-16 00:58:48,241 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:48,242 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [459153379] [2021-12-16 00:58:48,242 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:48,242 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:48,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 00:58:48,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2021-12-16 00:58:48,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-12-16 00:58:48,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:58:48,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:48,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:58:48,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-12-16 00:58:48,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,407 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-16 00:58:48,408 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:48,408 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [459153379] [2021-12-16 00:58:48,408 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [459153379] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:58:48,408 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [189897971] [2021-12-16 00:58:48,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:48,408 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:58:48,409 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:58:48,447 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:58:48,497 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 00:58:48,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:48,540 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-16 00:58:48,543 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:58:48,868 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:58:48,869 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:58:48,869 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [189897971] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:48,869 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:58:48,869 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2021-12-16 00:58:48,869 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1100036400] [2021-12-16 00:58:48,870 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:48,870 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 00:58:48,870 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:48,870 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 00:58:48,871 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=364, Unknown=0, NotChecked=0, Total=420 [2021-12-16 00:58:48,871 INFO L87 Difference]: Start difference. First operand 571 states and 692 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2021-12-16 00:58:49,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:49,036 INFO L93 Difference]: Finished difference Result 1112 states and 1354 transitions. [2021-12-16 00:58:49,036 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:58:49,036 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) Word has length 67 [2021-12-16 00:58:49,037 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:49,039 INFO L225 Difference]: With dead ends: 1112 [2021-12-16 00:58:49,039 INFO L226 Difference]: Without dead ends: 548 [2021-12-16 00:58:49,051 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 90 GetRequests, 70 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=56, Invalid=364, Unknown=0, NotChecked=0, Total=420 [2021-12-16 00:58:49,052 INFO L933 BasicCegarLoop]: 210 mSDtfsCounter, 76 mSDsluCounter, 765 mSDsCounter, 0 mSdLazyCounter, 198 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 975 SdHoareTripleChecker+Invalid, 201 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 198 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:49,052 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [80 Valid, 975 Invalid, 201 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 198 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:58:49,053 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 548 states. [2021-12-16 00:58:49,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 548 to 546. [2021-12-16 00:58:49,101 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 546 states, 397 states have (on average 1.1712846347607053) internal successors, (465), 421 states have internal predecessors, (465), 76 states have call successors, (76), 68 states have call predecessors, (76), 72 states have return successors, (106), 76 states have call predecessors, (106), 76 states have call successors, (106) [2021-12-16 00:58:49,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 546 states to 546 states and 647 transitions. [2021-12-16 00:58:49,103 INFO L78 Accepts]: Start accepts. Automaton has 546 states and 647 transitions. Word has length 67 [2021-12-16 00:58:49,103 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:49,103 INFO L470 AbstractCegarLoop]: Abstraction has 546 states and 647 transitions. [2021-12-16 00:58:49,103 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2021-12-16 00:58:49,103 INFO L276 IsEmpty]: Start isEmpty. Operand 546 states and 647 transitions. [2021-12-16 00:58:49,105 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2021-12-16 00:58:49,105 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:58:49,105 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:49,153 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-16 00:58:49,336 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-16 00:58:49,336 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:58:49,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:58:49,337 INFO L85 PathProgramCache]: Analyzing trace with hash 1570194048, now seen corresponding path program 1 times [2021-12-16 00:58:49,337 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:58:49,337 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1559469736] [2021-12-16 00:58:49,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:49,337 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:58:49,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-12-16 00:58:49,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2021-12-16 00:58:49,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:58:49,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:58:49,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:58:49,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:58:49,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-16 00:58:49,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2021-12-16 00:58:49,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-12-16 00:58:49,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:58:49,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2021-12-16 00:58:49,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-16 00:58:49,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:58:49,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-12-16 00:58:49,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,567 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-12-16 00:58:49,567 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:58:49,567 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1559469736] [2021-12-16 00:58:49,567 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1559469736] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:58:49,567 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [166959064] [2021-12-16 00:58:49,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:58:49,568 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:58:49,568 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:58:49,580 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:58:49,612 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-16 00:58:49,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:58:49,701 INFO L263 TraceCheckSpWp]: Trace formula consists of 521 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-16 00:58:49,704 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:58:50,005 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-16 00:58:50,006 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:58:50,006 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [166959064] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:58:50,006 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:58:50,006 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2021-12-16 00:58:50,006 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [772560153] [2021-12-16 00:58:50,007 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:58:50,007 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 00:58:50,007 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:58:50,007 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 00:58:50,008 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=293, Unknown=0, NotChecked=0, Total=342 [2021-12-16 00:58:50,008 INFO L87 Difference]: Start difference. First operand 546 states and 647 transitions. Second operand has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-16 00:58:50,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:58:50,125 INFO L93 Difference]: Finished difference Result 930 states and 1115 transitions. [2021-12-16 00:58:50,126 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:58:50,126 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 121 [2021-12-16 00:58:50,126 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:58:50,126 INFO L225 Difference]: With dead ends: 930 [2021-12-16 00:58:50,127 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 00:58:50,128 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=359, Unknown=0, NotChecked=0, Total=420 [2021-12-16 00:58:50,128 INFO L933 BasicCegarLoop]: 198 mSDtfsCounter, 74 mSDsluCounter, 787 mSDsCounter, 0 mSdLazyCounter, 119 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 985 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 119 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:58:50,129 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [78 Valid, 985 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:58:50,129 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 00:58:50,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 00:58:50,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 00:58:50,129 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 00:58:50,130 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 121 [2021-12-16 00:58:50,130 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:58:50,130 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 00:58:50,130 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-16 00:58:50,130 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 00:58:50,130 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 00:58:50,132 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 00:58:50,152 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-16 00:58:50,349 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-16 00:58:50,351 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 00:58:53,144 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 473 480) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= 0 |old(~pumpRunning~0)|)) (.cse2 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2021-12-16 00:58:53,145 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 473 480) no Hoare annotation was computed. [2021-12-16 00:58:53,145 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 473 480) no Hoare annotation was computed. [2021-12-16 00:58:53,145 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 363 369) no Hoare annotation was computed. [2021-12-16 00:58:53,145 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 363 369) the Hoare annotation is: true [2021-12-16 00:58:53,146 INFO L854 garLoopResultBuilder]: At program point L411(line 411) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-16 00:58:53,146 INFO L854 garLoopResultBuilder]: At program point L407(line 407) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-16 00:58:53,146 INFO L858 garLoopResultBuilder]: For program point L405(lines 405 413) no Hoare annotation was computed. [2021-12-16 00:58:53,146 INFO L858 garLoopResultBuilder]: For program point L401(lines 401 418) no Hoare annotation was computed. [2021-12-16 00:58:53,147 INFO L854 garLoopResultBuilder]: At program point L416(line 416) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~systemActive~0 1))) (.cse1 (= ~pumpRunning~0 0))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= 0 |old(~pumpRunning~0)|) .cse2 .cse0) (or .cse2 .cse0 .cse1))) [2021-12-16 00:58:53,147 INFO L858 garLoopResultBuilder]: For program point L416-1(lines 397 421) no Hoare annotation was computed. [2021-12-16 00:58:53,147 INFO L854 garLoopResultBuilder]: At program point L571(lines 556 574) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-16 00:58:53,147 INFO L858 garLoopResultBuilder]: For program point L565(lines 565 569) no Hoare annotation was computed. [2021-12-16 00:58:53,147 INFO L858 garLoopResultBuilder]: For program point L565-2(lines 565 569) no Hoare annotation was computed. [2021-12-16 00:58:53,148 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 397 421) the Hoare annotation is: (let ((.cse0 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse0 (= ~pumpRunning~0 0)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-16 00:58:53,148 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 397 421) no Hoare annotation was computed. [2021-12-16 00:58:53,148 INFO L854 garLoopResultBuilder]: At program point L194(lines 189 197) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-16 00:58:53,148 INFO L858 garLoopResultBuilder]: For program point L126-1(lines 122 133) no Hoare annotation was computed. [2021-12-16 00:58:53,149 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 122 133) the Hoare annotation is: (let ((.cse0 (not (= ~systemActive~0 1)))) (and (or (not (= ~pumpRunning~0 0)) (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|) (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse0) (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 0) .cse0))) [2021-12-16 00:58:53,149 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 122 133) no Hoare annotation was computed. [2021-12-16 00:58:53,149 INFO L858 garLoopResultBuilder]: For program point L221(lines 221 227) no Hoare annotation was computed. [2021-12-16 00:58:53,149 INFO L858 garLoopResultBuilder]: For program point L217(lines 217 230) no Hoare annotation was computed. [2021-12-16 00:58:53,149 INFO L854 garLoopResultBuilder]: At program point L217-1(lines 209 233) the Hoare annotation is: (let ((.cse7 (not (= 0 |old(~pumpRunning~0)|))) (.cse2 (= ~pumpRunning~0 0)) (.cse1 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (.cse13 (<= 2 ~waterLevel~0))) (let ((.cse3 (and .cse1 .cse13)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (not (= |old(~waterLevel~0)| 1))) (.cse9 (= ~waterLevel~0 1)) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse12 (and .cse7 (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse2)) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= ~systemActive~0 1)))) (and (or (and .cse0 .cse1) (and .cse1 .cse2) .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse3 .cse4 .cse5) (or .cse8 .cse9 .cse10 .cse11 .cse5) (or .cse12 (and .cse0 .cse2) .cse10 .cse5) (or .cse8 .cse9 .cse11 .cse4 .cse5) (or .cse6 .cse12 .cse10 .cse13 .cse5)))) [2021-12-16 00:58:53,149 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 339 362) no Hoare annotation was computed. [2021-12-16 00:58:53,149 INFO L858 garLoopResultBuilder]: For program point L102(lines 102 106) no Hoare annotation was computed. [2021-12-16 00:58:53,150 INFO L854 garLoopResultBuilder]: At program point L102-2(lines 98 109) the Hoare annotation is: (let ((.cse0 (not (= ~systemActive~0 1))) (.cse1 (and (not (= 0 |old(~pumpRunning~0)|)) (= ~pumpRunning~0 |old(~pumpRunning~0)|)))) (and (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1))) [2021-12-16 00:58:53,150 INFO L858 garLoopResultBuilder]: For program point L350-1(lines 350 356) no Hoare annotation was computed. [2021-12-16 00:58:53,150 INFO L854 garLoopResultBuilder]: At program point L437(line 437) the Hoare annotation is: (let ((.cse0 (not (= ~systemActive~0 1)))) (and (or (not (= ~methaneLevelCritical~0 0)) .cse0 (and (not (= 0 |old(~pumpRunning~0)|)) (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0))) [2021-12-16 00:58:53,150 INFO L854 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse1 (not (= 0 |old(~pumpRunning~0)|))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (= ~systemActive~0 1)))) (and (or (not (= ~methaneLevelCritical~0 0)) .cse0 (and .cse1 .cse2)) (or (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse2) .cse0))) [2021-12-16 00:58:53,151 INFO L854 garLoopResultBuilder]: At program point L429(line 429) the Hoare annotation is: (let ((.cse0 (not (= ~systemActive~0 1))) (.cse1 (and (not (= 0 |old(~pumpRunning~0)|)) (= ~pumpRunning~0 |old(~pumpRunning~0)|)))) (and (or (not (= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1))) [2021-12-16 00:58:53,151 INFO L858 garLoopResultBuilder]: For program point L429-1(line 429) no Hoare annotation was computed. [2021-12-16 00:58:53,151 INFO L854 garLoopResultBuilder]: At program point L442(line 442) the Hoare annotation is: (let ((.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (<= 2 ~waterLevel~0)) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= ~waterLevel~0 1)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse3) (or .cse4 .cse2 .cse3) (or .cse6 .cse7 .cse2 .cse3) (or .cse6 .cse5 .cse7 .cse3) (or .cse0 .cse1 .cse5 .cse3))) [2021-12-16 00:58:53,151 INFO L854 garLoopResultBuilder]: At program point L442-1(lines 423 447) the Hoare annotation is: (let ((.cse11 (= ~methaneLevelCritical~0 0)) (.cse3 (<= 2 ~waterLevel~0))) (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (and .cse11 .cse3)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (not .cse11)) (.cse4 (not (= ~systemActive~0 1))) (.cse5 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse5) (and .cse6 .cse5) .cse1 .cse4) (or .cse7 .cse8 .cse1 .cse2 .cse4) (or .cse0 .cse9 .cse2 .cse10 .cse4) (or .cse7 .cse8 .cse2 .cse10 .cse4) (or .cse9 .cse6 .cse10 .cse4 .cse5)))) [2021-12-16 00:58:53,152 INFO L854 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse11 (= ~methaneLevelCritical~0 0)) (.cse3 (<= 2 ~waterLevel~0))) (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (= ~waterLevel~0 1)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (and .cse11 .cse3)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (not .cse11)) (.cse4 (not (= ~systemActive~0 1))) (.cse5 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse5) (and .cse6 .cse5) .cse1 .cse4) (or .cse7 .cse8 .cse1 .cse2 .cse4) (or .cse0 .cse9 .cse2 .cse10 .cse4) (or .cse7 .cse8 .cse2 .cse10 .cse4) (or .cse9 .cse6 .cse10 .cse4 .cse5)))) [2021-12-16 00:58:53,152 INFO L858 garLoopResultBuilder]: For program point L343-1(lines 342 361) no Hoare annotation was computed. [2021-12-16 00:58:53,152 INFO L858 garLoopResultBuilder]: For program point L215-1(line 215) no Hoare annotation was computed. [2021-12-16 00:58:53,152 INFO L858 garLoopResultBuilder]: For program point L203(line 203) no Hoare annotation was computed. [2021-12-16 00:58:53,152 INFO L854 garLoopResultBuilder]: At program point L497(lines 492 500) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~systemActive~0 1)))) (and (let ((.cse0 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (= ~pumpRunning~0 0))) (or (and .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2 (and (<= 1 |timeShift_processEnvironment_~tmp~4#1|) .cse0 .cse1) .cse3)) (or (not (= ~methaneLevelCritical~0 0)) .cse3) (or (not (<= 2 |old(~waterLevel~0)|)) .cse2 .cse4 (<= 2 ~waterLevel~0) .cse3) (or (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1) .cse2 .cse4 .cse3))) [2021-12-16 00:58:53,152 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 339 362) the Hoare annotation is: (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= ~waterLevel~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (<= 2 ~waterLevel~0)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse5 .cse4) (or .cse0 .cse1 .cse3 .cse6 .cse4) (or .cse5 .cse6 .cse4) (or .cse7 .cse2 .cse8 .cse4) (or .cse7 .cse8 .cse6 .cse4))) [2021-12-16 00:58:53,155 INFO L858 garLoopResultBuilder]: For program point L431(lines 431 439) no Hoare annotation was computed. [2021-12-16 00:58:53,155 INFO L854 garLoopResultBuilder]: At program point L204(lines 199 206) the Hoare annotation is: (let ((.cse0 (not (= ~systemActive~0 1)))) (and (or (not (= ~methaneLevelCritical~0 0)) .cse0) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0))) [2021-12-16 00:58:53,155 INFO L858 garLoopResultBuilder]: For program point L427(lines 427 444) no Hoare annotation was computed. [2021-12-16 00:58:53,155 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 339 362) no Hoare annotation was computed. [2021-12-16 00:58:53,155 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 203) no Hoare annotation was computed. [2021-12-16 00:58:53,155 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 237 266) no Hoare annotation was computed. [2021-12-16 00:58:53,156 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 237 266) the Hoare annotation is: true [2021-12-16 00:58:53,156 INFO L858 garLoopResultBuilder]: For program point L251(lines 251 255) no Hoare annotation was computed. [2021-12-16 00:58:53,156 INFO L861 garLoopResultBuilder]: At program point L251-1(lines 251 255) the Hoare annotation is: true [2021-12-16 00:58:53,156 INFO L858 garLoopResultBuilder]: For program point L248(line 248) no Hoare annotation was computed. [2021-12-16 00:58:53,156 INFO L861 garLoopResultBuilder]: At program point L247-2(lines 247 261) the Hoare annotation is: true [2021-12-16 00:58:53,156 INFO L861 garLoopResultBuilder]: At program point L243(line 243) the Hoare annotation is: true [2021-12-16 00:58:53,156 INFO L858 garLoopResultBuilder]: For program point L243-1(line 243) no Hoare annotation was computed. [2021-12-16 00:58:53,156 INFO L861 garLoopResultBuilder]: At program point L262(lines 237 266) the Hoare annotation is: true [2021-12-16 00:58:53,157 INFO L858 garLoopResultBuilder]: For program point L258(line 258) no Hoare annotation was computed. [2021-12-16 00:58:53,157 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 134 142) the Hoare annotation is: true [2021-12-16 00:58:53,157 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 134 142) no Hoare annotation was computed. [2021-12-16 00:58:53,157 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 134 142) no Hoare annotation was computed. [2021-12-16 00:58:53,157 INFO L858 garLoopResultBuilder]: For program point L320(lines 320 327) no Hoare annotation was computed. [2021-12-16 00:58:53,157 INFO L858 garLoopResultBuilder]: For program point L320-2(lines 320 327) no Hoare annotation was computed. [2021-12-16 00:58:53,158 INFO L858 garLoopResultBuilder]: For program point L622(lines 622 626) no Hoare annotation was computed. [2021-12-16 00:58:53,158 INFO L854 garLoopResultBuilder]: At program point L622-2(lines 616 627) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 1))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1))) [2021-12-16 00:58:53,158 INFO L861 garLoopResultBuilder]: At program point L329(lines 310 332) the Hoare annotation is: true [2021-12-16 00:58:53,159 INFO L854 garLoopResultBuilder]: At program point L296(lines 292 298) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:58:53,159 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 00:58:53,159 INFO L858 garLoopResultBuilder]: For program point L606(lines 606 612) no Hoare annotation was computed. [2021-12-16 00:58:53,159 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 00:58:53,159 INFO L858 garLoopResultBuilder]: For program point L606-1(lines 606 612) no Hoare annotation was computed. [2021-12-16 00:58:53,159 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 00:58:53,160 INFO L861 garLoopResultBuilder]: At program point L635(lines 576 639) the Hoare annotation is: true [2021-12-16 00:58:53,161 INFO L854 garLoopResultBuilder]: At program point L598(line 598) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 1))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 (= ~pumpRunning~0 0)) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1))) [2021-12-16 00:58:53,161 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 00:58:53,161 INFO L854 garLoopResultBuilder]: At program point L632(lines 585 633) the Hoare annotation is: false [2021-12-16 00:58:53,161 INFO L854 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:58:53,161 INFO L854 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:58:53,161 INFO L858 garLoopResultBuilder]: For program point L587(lines 586 631) no Hoare annotation was computed. [2021-12-16 00:58:53,162 INFO L858 garLoopResultBuilder]: For program point L616(lines 616 627) no Hoare annotation was computed. [2021-12-16 00:58:53,162 INFO L854 garLoopResultBuilder]: At program point L608(line 608) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 1))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 (= ~pumpRunning~0 0)) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1))) [2021-12-16 00:58:53,162 INFO L854 garLoopResultBuilder]: At program point L629(lines 586 631) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 1))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 (= ~pumpRunning~0 0)) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1))) [2021-12-16 00:58:53,162 INFO L858 garLoopResultBuilder]: For program point L596(lines 596 602) no Hoare annotation was computed. [2021-12-16 00:58:53,162 INFO L858 garLoopResultBuilder]: For program point L596-1(lines 596 602) no Hoare annotation was computed. [2021-12-16 00:58:53,162 INFO L861 garLoopResultBuilder]: At program point L307(lines 300 309) the Hoare annotation is: true [2021-12-16 00:58:53,162 INFO L858 garLoopResultBuilder]: For program point L588(lines 588 592) no Hoare annotation was computed. [2021-12-16 00:58:53,162 INFO L854 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:58:53,163 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 371 395) the Hoare annotation is: (let ((.cse0 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse0 (= ~pumpRunning~0 0)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-16 00:58:53,163 INFO L854 garLoopResultBuilder]: At program point L184(lines 175 188) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0))) (let ((.cse0 (and (<= 2 ~waterLevel~0) .cse4)) (.cse1 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1) .cse4)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse3) (or (= 0 |old(~pumpRunning~0)|) .cse2 .cse3)))) [2021-12-16 00:58:53,163 INFO L858 garLoopResultBuilder]: For program point L463(lines 463 469) no Hoare annotation was computed. [2021-12-16 00:58:53,163 INFO L854 garLoopResultBuilder]: At program point L461(line 461) the Hoare annotation is: (let ((.cse0 (and (<= 2 ~waterLevel~0) (= ~pumpRunning~0 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse2) (or (= 0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-16 00:58:53,163 INFO L854 garLoopResultBuilder]: At program point L463-2(lines 456 472) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~5#1|) .cse0 (= ~pumpRunning~0 0)) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse1) (or .cse0 .cse2 .cse1) (or (= 0 |old(~pumpRunning~0)|) .cse2 .cse1))) [2021-12-16 00:58:53,163 INFO L858 garLoopResultBuilder]: For program point L461-1(line 461) no Hoare annotation was computed. [2021-12-16 00:58:53,164 INFO L854 garLoopResultBuilder]: At program point L552(lines 537 555) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) .cse4)) (.cse0 (and (<= 2 ~waterLevel~0) .cse4)) (.cse3 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (= 0 |old(~pumpRunning~0)|) .cse2 .cse3) (or .cse1 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse3)))) [2021-12-16 00:58:53,164 INFO L854 garLoopResultBuilder]: At program point L453(lines 448 455) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (<= 2 ~waterLevel~0) .cse1 .cse0) (or (= 0 |old(~pumpRunning~0)|) .cse1 .cse0))) [2021-12-16 00:58:53,164 INFO L858 garLoopResultBuilder]: For program point L546(lines 546 550) no Hoare annotation was computed. [2021-12-16 00:58:53,164 INFO L854 garLoopResultBuilder]: At program point L385(line 385) the Hoare annotation is: (let ((.cse0 (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (and .cse0 (= ~pumpRunning~0 0)) (not (= |old(~pumpRunning~0)| 0)) .cse1) (or (= 0 |old(~pumpRunning~0)|) .cse2 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse2 .cse1))) [2021-12-16 00:58:53,164 INFO L858 garLoopResultBuilder]: For program point L546-2(lines 546 550) no Hoare annotation was computed. [2021-12-16 00:58:53,164 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 371 395) no Hoare annotation was computed. [2021-12-16 00:58:53,164 INFO L858 garLoopResultBuilder]: For program point L379(lines 379 387) no Hoare annotation was computed. [2021-12-16 00:58:53,164 INFO L858 garLoopResultBuilder]: For program point L375(lines 375 392) no Hoare annotation was computed. [2021-12-16 00:58:53,165 INFO L858 garLoopResultBuilder]: For program point L179(lines 179 185) no Hoare annotation was computed. [2021-12-16 00:58:53,165 INFO L854 garLoopResultBuilder]: At program point L390(line 390) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-16 00:58:53,165 INFO L858 garLoopResultBuilder]: For program point L390-1(lines 371 395) no Hoare annotation was computed. [2021-12-16 00:58:53,165 INFO L858 garLoopResultBuilder]: For program point L114-1(lines 110 121) no Hoare annotation was computed. [2021-12-16 00:58:53,165 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 110 121) no Hoare annotation was computed. [2021-12-16 00:58:53,165 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 110 121) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (<= 2 ~waterLevel~0)) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= ~waterLevel~0 1)) (.cse2 (not (= ~pumpRunning~0 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse3 .cse4) (or .cse5 .cse2 .cse7 .cse6 .cse4) (or .cse0 .cse1 .cse2 .cse7 .cse4))) [2021-12-16 00:58:53,165 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 481 491) the Hoare annotation is: true [2021-12-16 00:58:53,165 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 481 491) no Hoare annotation was computed. [2021-12-16 00:58:53,166 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 481 491) no Hoare annotation was computed. [2021-12-16 00:58:53,166 INFO L861 garLoopResultBuilder]: At program point L486(line 486) the Hoare annotation is: true [2021-12-16 00:58:53,166 INFO L858 garLoopResultBuilder]: For program point L486-1(line 486) no Hoare annotation was computed. [2021-12-16 00:58:53,168 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:58:53,169 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 00:58:53,185 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 12:58:53 BoogieIcfgContainer [2021-12-16 00:58:53,185 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 00:58:53,186 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 00:58:53,186 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 00:58:53,186 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 00:58:53,186 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:58:45" (3/4) ... [2021-12-16 00:58:53,188 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 00:58:53,192 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-16 00:58:53,192 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 00:58:53,192 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 00:58:53,192 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 00:58:53,192 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 00:58:53,193 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-16 00:58:53,193 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:58:53,193 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 00:58:53,193 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-16 00:58:53,193 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-16 00:58:53,198 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-16 00:58:53,199 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 00:58:53,199 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 00:58:53,199 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 00:58:53,200 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 00:58:53,200 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:58:53,200 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:58:53,215 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(methaneLevelCritical == 0) || !(systemActive == 1)) || (!(0 == \old(pumpRunning)) && pumpRunning == \old(pumpRunning))) && ((!(1 <= methaneLevelCritical) || !(systemActive == 1)) || (!(0 == \old(pumpRunning)) && pumpRunning == \old(pumpRunning))) [2021-12-16 00:58:53,215 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(systemActive == 1)) && ((((1 <= tmp && pumpRunning == 0) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(systemActive == 1))) && ((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((!(2 <= \old(waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((((methaneLevelCritical == 0 && 2 <= waterLevel) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || pumpRunning == 0) [2021-12-16 00:58:53,216 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning) && tmp == 0) || (tmp == 0 && pumpRunning == 0)) || (tmp == 0 && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((((!(2 <= \old(waterLevel)) || !(0 == \old(pumpRunning))) || (tmp == 0 && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((((!(0 == \old(pumpRunning)) && 1 <= tmp) && pumpRunning == 0) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(systemActive == 1))) && ((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((!(2 <= \old(waterLevel)) || ((!(0 == \old(pumpRunning)) && 1 <= tmp) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || 2 <= waterLevel) || !(systemActive == 1)) [2021-12-16 00:58:53,216 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\result == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && \result == 0) && pumpRunning == 0)) || !(systemActive == 1)) && (!(methaneLevelCritical == 0) || !(systemActive == 1))) && ((((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(systemActive == 1))) && ((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-16 00:58:53,216 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((methaneLevelCritical <= tmp && 2 <= waterLevel) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((0 == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:58:53,216 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((0 == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:58:53,216 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:58:53,217 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && pumpRunning == 0) || (\result == 1 && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((((2 <= waterLevel && pumpRunning == 0) || (\result == 1 && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((0 == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:58:53,217 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:58:53,217 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && pumpRunning == 0) || ((\result == 0 && tmp___0 == 0) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((0 == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((((\result == 0 && tmp___0 == 0) && pumpRunning == 0) || (2 <= waterLevel && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-16 00:58:53,252 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 00:58:53,252 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 00:58:53,253 INFO L158 Benchmark]: Toolchain (without parser) took 8973.86ms. Allocated memory was 140.5MB in the beginning and 230.7MB in the end (delta: 90.2MB). Free memory was 109.8MB in the beginning and 133.4MB in the end (delta: -23.6MB). Peak memory consumption was 65.5MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,253 INFO L158 Benchmark]: CDTParser took 0.73ms. Allocated memory is still 79.7MB. Free memory was 39.8MB in the beginning and 39.7MB in the end (delta: 77.0kB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,253 INFO L158 Benchmark]: CACSL2BoogieTranslator took 426.40ms. Allocated memory is still 140.5MB. Free memory was 109.8MB in the beginning and 107.7MB in the end (delta: 2.1MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,254 INFO L158 Benchmark]: Boogie Procedure Inliner took 56.35ms. Allocated memory is still 140.5MB. Free memory was 107.7MB in the beginning and 105.1MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,254 INFO L158 Benchmark]: Boogie Preprocessor took 40.16ms. Allocated memory is still 140.5MB. Free memory was 105.1MB in the beginning and 103.5MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,254 INFO L158 Benchmark]: RCFGBuilder took 386.20ms. Allocated memory is still 140.5MB. Free memory was 103.5MB in the beginning and 86.2MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,255 INFO L158 Benchmark]: TraceAbstraction took 7992.52ms. Allocated memory was 140.5MB in the beginning and 230.7MB in the end (delta: 90.2MB). Free memory was 85.6MB in the beginning and 140.7MB in the end (delta: -55.1MB). Peak memory consumption was 112.1MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,255 INFO L158 Benchmark]: Witness Printer took 66.96ms. Allocated memory is still 230.7MB. Free memory was 140.7MB in the beginning and 133.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-16 00:58:53,256 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.73ms. Allocated memory is still 79.7MB. Free memory was 39.8MB in the beginning and 39.7MB in the end (delta: 77.0kB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 426.40ms. Allocated memory is still 140.5MB. Free memory was 109.8MB in the beginning and 107.7MB in the end (delta: 2.1MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 56.35ms. Allocated memory is still 140.5MB. Free memory was 107.7MB in the beginning and 105.1MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 40.16ms. Allocated memory is still 140.5MB. Free memory was 105.1MB in the beginning and 103.5MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 386.20ms. Allocated memory is still 140.5MB. Free memory was 103.5MB in the beginning and 86.2MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 7992.52ms. Allocated memory was 140.5MB in the beginning and 230.7MB in the end (delta: 90.2MB). Free memory was 85.6MB in the beginning and 140.7MB in the end (delta: -55.1MB). Peak memory consumption was 112.1MB. Max. memory is 16.1GB. * Witness Printer took 66.96ms. Allocated memory is still 230.7MB. Free memory was 140.7MB in the beginning and 133.4MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 203]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 108 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.9s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.8s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1513 SdHoareTripleChecker+Valid, 1.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1485 mSDsluCounter, 4227 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2753 mSDsCounter, 533 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1943 IncrementalHoareTripleChecker+Invalid, 2476 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 533 mSolverCounterUnsat, 1474 mSDtfsCounter, 1943 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 408 GetRequests, 304 SyntacticMatches, 3 SemanticMatches, 101 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 160 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=571occurred in iteration=9, InterpolantAutomatonStates: 87, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 11 MinimizatonAttempts, 64 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 1485 PreInvPairs, 1664 NumberOfFragments, 1741 HoareAnnotationTreeSize, 1485 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 49 FomulaSimplificationsInter, 8138 FormulaSimplificationTreeSizeReductionInter, 2.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 785 NumberOfCodeBlocks, 785 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 772 ConstructedInterpolants, 0 QuantifiedInterpolants, 1529 SizeOfPredicates, 6 NumberOfNonLiveVariables, 913 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 97/111 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 310]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && pumpRunning == 0) || ((\result == 0 && tmp___0 == 0) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((0 == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((((\result == 0 && tmp___0 == 0) && pumpRunning == 0) || (2 <= waterLevel && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 199]: Loop Invariant Derived loop invariant: (!(methaneLevelCritical == 0) || !(systemActive == 1)) && (!(1 <= methaneLevelCritical) || !(systemActive == 1)) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 556]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 209]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning) && tmp == 0) || (tmp == 0 && pumpRunning == 0)) || (tmp == 0 && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((((!(2 <= \old(waterLevel)) || !(0 == \old(pumpRunning))) || (tmp == 0 && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && (((((!(0 == \old(pumpRunning)) && 1 <= tmp) && pumpRunning == 0) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(systemActive == 1))) && ((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((!(2 <= \old(waterLevel)) || ((!(0 == \old(pumpRunning)) && 1 <= tmp) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || 2 <= waterLevel) || !(systemActive == 1)) - InvariantResult [Line: 247]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 237]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 585]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 423]: Loop Invariant Derived loop invariant: ((((((((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(systemActive == 1)) && ((((1 <= tmp && pumpRunning == 0) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(systemActive == 1))) && ((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((!(2 <= \old(waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((((methaneLevelCritical == 0 && 2 <= waterLevel) || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || pumpRunning == 0) - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && pumpRunning == 0) || (\result == 1 && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((((2 <= waterLevel && pumpRunning == 0) || (\result == 1 && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((0 == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: (((splverifierCounter == 0 && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0) || ((splverifierCounter == 0 && methaneLevelCritical == 0) && systemActive == 1) - InvariantResult [Line: 98]: Loop Invariant Derived loop invariant: ((!(methaneLevelCritical == 0) || !(systemActive == 1)) || (!(0 == \old(pumpRunning)) && pumpRunning == \old(pumpRunning))) && ((!(1 <= methaneLevelCritical) || !(systemActive == 1)) || (!(0 == \old(pumpRunning)) && pumpRunning == \old(pumpRunning))) - InvariantResult [Line: 456]: Loop Invariant Derived loop invariant: ((((((methaneLevelCritical <= tmp && 2 <= waterLevel) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((0 == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 492]: Loop Invariant Derived loop invariant: (((((((\result == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || ((1 <= tmp && \result == 0) && pumpRunning == 0)) || !(systemActive == 1)) && (!(methaneLevelCritical == 0) || !(systemActive == 1))) && ((((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(systemActive == 1))) && ((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 448]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((0 == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) RESULT: Ultimate proved your program to be correct! [2021-12-16 00:58:53,315 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE