./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 797436b26f0180d1dd4048b2036765c1f76ffc9f34d72e35837e9efcc5780486 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 00:59:10,774 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 00:59:10,776 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 00:59:10,799 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 00:59:10,799 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 00:59:10,801 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 00:59:10,803 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 00:59:10,807 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 00:59:10,808 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 00:59:10,811 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 00:59:10,812 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 00:59:10,813 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 00:59:10,813 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 00:59:10,815 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 00:59:10,817 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 00:59:10,820 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 00:59:10,821 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 00:59:10,822 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 00:59:10,825 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 00:59:10,829 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 00:59:10,830 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 00:59:10,831 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 00:59:10,832 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 00:59:10,832 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 00:59:10,837 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 00:59:10,837 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 00:59:10,838 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 00:59:10,839 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 00:59:10,839 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 00:59:10,840 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 00:59:10,840 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 00:59:10,841 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 00:59:10,842 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 00:59:10,843 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 00:59:10,844 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 00:59:10,844 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 00:59:10,845 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 00:59:10,845 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 00:59:10,845 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 00:59:10,846 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 00:59:10,846 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 00:59:10,847 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 00:59:10,876 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 00:59:10,876 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 00:59:10,877 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 00:59:10,877 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 00:59:10,878 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 00:59:10,878 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 00:59:10,879 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 00:59:10,879 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 00:59:10,879 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 00:59:10,879 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 00:59:10,880 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 00:59:10,880 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 00:59:10,880 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 00:59:10,880 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 00:59:10,880 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 00:59:10,880 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 00:59:10,880 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 00:59:10,880 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 00:59:10,881 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 00:59:10,881 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 00:59:10,881 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 00:59:10,881 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 00:59:10,881 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 00:59:10,881 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 00:59:10,881 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:59:10,882 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 00:59:10,882 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 00:59:10,883 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 00:59:10,883 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 00:59:10,883 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 00:59:10,883 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 00:59:10,883 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 00:59:10,884 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 00:59:10,884 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 00:59:10,884 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 797436b26f0180d1dd4048b2036765c1f76ffc9f34d72e35837e9efcc5780486 [2021-12-16 00:59:11,084 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 00:59:11,108 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 00:59:11,109 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 00:59:11,110 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 00:59:11,123 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 00:59:11,125 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c [2021-12-16 00:59:11,185 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cb9ad8279/fd6b63b0bb2d4b369ef9ede52f2dc576/FLAG45e622f35 [2021-12-16 00:59:11,549 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 00:59:11,557 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c [2021-12-16 00:59:11,580 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cb9ad8279/fd6b63b0bb2d4b369ef9ede52f2dc576/FLAG45e622f35 [2021-12-16 00:59:11,920 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cb9ad8279/fd6b63b0bb2d4b369ef9ede52f2dc576 [2021-12-16 00:59:11,922 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 00:59:11,923 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 00:59:11,924 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 00:59:11,924 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 00:59:11,926 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 00:59:11,927 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:59:11" (1/1) ... [2021-12-16 00:59:11,928 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@69106974 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:11, skipping insertion in model container [2021-12-16 00:59:11,928 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:59:11" (1/1) ... [2021-12-16 00:59:11,939 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 00:59:11,978 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 00:59:12,165 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c[17766,17779] [2021-12-16 00:59:12,170 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:59:12,175 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 00:59:12,217 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c[17766,17779] [2021-12-16 00:59:12,219 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:59:12,231 INFO L208 MainTranslator]: Completed translation [2021-12-16 00:59:12,231 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:12 WrapperNode [2021-12-16 00:59:12,231 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 00:59:12,232 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 00:59:12,233 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 00:59:12,233 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 00:59:12,237 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:12" (1/1) ... [2021-12-16 00:59:12,262 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:12" (1/1) ... [2021-12-16 00:59:12,290 INFO L137 Inliner]: procedures = 57, calls = 159, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 252 [2021-12-16 00:59:12,290 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 00:59:12,291 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 00:59:12,291 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 00:59:12,291 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 00:59:12,297 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:12" (1/1) ... [2021-12-16 00:59:12,297 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:12" (1/1) ... [2021-12-16 00:59:12,303 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:12" (1/1) ... [2021-12-16 00:59:12,303 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:12" (1/1) ... [2021-12-16 00:59:12,315 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:12" (1/1) ... [2021-12-16 00:59:12,331 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:12" (1/1) ... [2021-12-16 00:59:12,332 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:12" (1/1) ... [2021-12-16 00:59:12,338 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 00:59:12,339 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 00:59:12,340 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 00:59:12,340 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 00:59:12,341 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:12" (1/1) ... [2021-12-16 00:59:12,345 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:59:12,354 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:12,364 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 00:59:12,371 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 00:59:12,399 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 00:59:12,399 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 00:59:12,400 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 00:59:12,400 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 00:59:12,400 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 00:59:12,400 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 00:59:12,401 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 00:59:12,403 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-16 00:59:12,403 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-16 00:59:12,403 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 00:59:12,403 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 00:59:12,404 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-16 00:59:12,404 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-16 00:59:12,404 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-16 00:59:12,404 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-16 00:59:12,404 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-16 00:59:12,404 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-16 00:59:12,404 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 00:59:12,405 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 00:59:12,405 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 00:59:12,405 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 00:59:12,405 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 00:59:12,479 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 00:59:12,481 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 00:59:12,751 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 00:59:12,757 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 00:59:12,758 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 00:59:12,759 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:12 BoogieIcfgContainer [2021-12-16 00:59:12,761 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 00:59:12,762 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 00:59:12,762 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 00:59:12,765 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 00:59:12,765 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 12:59:11" (1/3) ... [2021-12-16 00:59:12,765 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c739a97 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:59:12, skipping insertion in model container [2021-12-16 00:59:12,766 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:12" (2/3) ... [2021-12-16 00:59:12,766 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c739a97 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:59:12, skipping insertion in model container [2021-12-16 00:59:12,766 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:12" (3/3) ... [2021-12-16 00:59:12,767 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product48.cil.c [2021-12-16 00:59:12,771 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 00:59:12,771 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 00:59:12,819 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 00:59:12,825 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 00:59:12,825 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 00:59:12,858 INFO L276 IsEmpty]: Start isEmpty. Operand has 103 states, 76 states have (on average 1.368421052631579) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-16 00:59:12,863 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-16 00:59:12,863 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:12,864 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:12,864 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:12,867 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:12,868 INFO L85 PathProgramCache]: Analyzing trace with hash 1420238352, now seen corresponding path program 1 times [2021-12-16 00:59:12,874 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:12,874 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [583700757] [2021-12-16 00:59:12,875 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:12,875 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:12,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:13,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 00:59:13,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:13,065 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:13,066 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:13,066 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [583700757] [2021-12-16 00:59:13,067 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [583700757] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:13,067 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:13,067 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 00:59:13,068 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [450756830] [2021-12-16 00:59:13,069 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:13,072 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 00:59:13,072 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:13,090 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 00:59:13,091 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:59:13,094 INFO L87 Difference]: Start difference. First operand has 103 states, 76 states have (on average 1.368421052631579) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:13,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:13,128 INFO L93 Difference]: Finished difference Result 197 states and 266 transitions. [2021-12-16 00:59:13,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 00:59:13,130 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-16 00:59:13,130 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:13,136 INFO L225 Difference]: With dead ends: 197 [2021-12-16 00:59:13,136 INFO L226 Difference]: Without dead ends: 94 [2021-12-16 00:59:13,139 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:59:13,141 INFO L933 BasicCegarLoop]: 130 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:13,142 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:13,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2021-12-16 00:59:13,167 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2021-12-16 00:59:13,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 69 states have (on average 1.3043478260869565) internal successors, (90), 77 states have internal predecessors, (90), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-16 00:59:13,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 121 transitions. [2021-12-16 00:59:13,173 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 121 transitions. Word has length 25 [2021-12-16 00:59:13,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:13,173 INFO L470 AbstractCegarLoop]: Abstraction has 94 states and 121 transitions. [2021-12-16 00:59:13,173 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:13,174 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 121 transitions. [2021-12-16 00:59:13,175 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-16 00:59:13,175 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:13,175 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:13,176 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 00:59:13,176 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:13,176 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:13,177 INFO L85 PathProgramCache]: Analyzing trace with hash -193757144, now seen corresponding path program 1 times [2021-12-16 00:59:13,177 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:13,177 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [737512375] [2021-12-16 00:59:13,177 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:13,177 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:13,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:13,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-16 00:59:13,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:13,230 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:13,231 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:13,231 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [737512375] [2021-12-16 00:59:13,231 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [737512375] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:13,232 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:13,232 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:59:13,232 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1596342414] [2021-12-16 00:59:13,232 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:13,233 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:59:13,234 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:13,234 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:59:13,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:13,236 INFO L87 Difference]: Start difference. First operand 94 states and 121 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:13,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:13,252 INFO L93 Difference]: Finished difference Result 148 states and 190 transitions. [2021-12-16 00:59:13,252 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:59:13,252 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-16 00:59:13,253 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:13,256 INFO L225 Difference]: With dead ends: 148 [2021-12-16 00:59:13,256 INFO L226 Difference]: Without dead ends: 85 [2021-12-16 00:59:13,261 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:13,263 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 17 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:13,267 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 194 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:13,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-12-16 00:59:13,274 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-12-16 00:59:13,278 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-16 00:59:13,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 109 transitions. [2021-12-16 00:59:13,284 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 109 transitions. Word has length 26 [2021-12-16 00:59:13,284 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:13,285 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 109 transitions. [2021-12-16 00:59:13,285 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:13,285 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2021-12-16 00:59:13,286 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-12-16 00:59:13,287 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:13,287 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:13,287 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 00:59:13,288 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:13,291 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:13,293 INFO L85 PathProgramCache]: Analyzing trace with hash -150671396, now seen corresponding path program 1 times [2021-12-16 00:59:13,294 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:13,294 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1199197731] [2021-12-16 00:59:13,294 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:13,294 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:13,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:13,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:13,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:13,386 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:13,386 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:13,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1199197731] [2021-12-16 00:59:13,386 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1199197731] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:13,386 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:13,386 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:13,387 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [455730875] [2021-12-16 00:59:13,387 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:13,387 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:13,387 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:13,387 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:13,387 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:13,387 INFO L87 Difference]: Start difference. First operand 85 states and 109 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:13,545 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:13,545 INFO L93 Difference]: Finished difference Result 296 states and 393 transitions. [2021-12-16 00:59:13,546 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-16 00:59:13,546 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-12-16 00:59:13,546 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:13,548 INFO L225 Difference]: With dead ends: 296 [2021-12-16 00:59:13,548 INFO L226 Difference]: Without dead ends: 219 [2021-12-16 00:59:13,548 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-16 00:59:13,549 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 309 mSDsluCounter, 359 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 309 SdHoareTripleChecker+Valid, 497 SdHoareTripleChecker+Invalid, 182 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:13,549 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [309 Valid, 497 Invalid, 182 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:13,550 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 219 states. [2021-12-16 00:59:13,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 219 to 197. [2021-12-16 00:59:13,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 144 states have (on average 1.3541666666666667) internal successors, (195), 162 states have internal predecessors, (195), 31 states have call successors, (31), 21 states have call predecessors, (31), 21 states have return successors, (32), 23 states have call predecessors, (32), 31 states have call successors, (32) [2021-12-16 00:59:13,570 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 258 transitions. [2021-12-16 00:59:13,571 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 258 transitions. Word has length 31 [2021-12-16 00:59:13,571 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:13,571 INFO L470 AbstractCegarLoop]: Abstraction has 197 states and 258 transitions. [2021-12-16 00:59:13,571 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:13,571 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 258 transitions. [2021-12-16 00:59:13,572 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-12-16 00:59:13,572 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:13,572 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:13,572 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 00:59:13,572 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:13,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:13,573 INFO L85 PathProgramCache]: Analyzing trace with hash 153261204, now seen corresponding path program 1 times [2021-12-16 00:59:13,573 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:13,573 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1250291687] [2021-12-16 00:59:13,573 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:13,573 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:13,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:13,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:13,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:13,619 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:13,619 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:13,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1250291687] [2021-12-16 00:59:13,619 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1250291687] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:13,619 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:13,619 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:13,620 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [283036609] [2021-12-16 00:59:13,620 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:13,620 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:13,620 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:13,620 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:13,620 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:13,620 INFO L87 Difference]: Start difference. First operand 197 states and 258 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:13,690 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:13,690 INFO L93 Difference]: Finished difference Result 573 states and 762 transitions. [2021-12-16 00:59:13,691 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:59:13,691 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2021-12-16 00:59:13,691 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:13,693 INFO L225 Difference]: With dead ends: 573 [2021-12-16 00:59:13,693 INFO L226 Difference]: Without dead ends: 384 [2021-12-16 00:59:13,694 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-16 00:59:13,694 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 77 mSDsluCounter, 418 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 537 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:13,695 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [80 Valid, 537 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:13,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 384 states. [2021-12-16 00:59:13,714 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 384 to 375. [2021-12-16 00:59:13,715 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 375 states, 270 states have (on average 1.3333333333333333) internal successors, (360), 305 states have internal predecessors, (360), 62 states have call successors, (62), 42 states have call predecessors, (62), 42 states have return successors, (67), 46 states have call predecessors, (67), 62 states have call successors, (67) [2021-12-16 00:59:13,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 375 states to 375 states and 489 transitions. [2021-12-16 00:59:13,717 INFO L78 Accepts]: Start accepts. Automaton has 375 states and 489 transitions. Word has length 34 [2021-12-16 00:59:13,717 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:13,717 INFO L470 AbstractCegarLoop]: Abstraction has 375 states and 489 transitions. [2021-12-16 00:59:13,717 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:13,717 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 489 transitions. [2021-12-16 00:59:13,719 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-16 00:59:13,719 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:13,719 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:13,719 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 00:59:13,719 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:13,720 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:13,720 INFO L85 PathProgramCache]: Analyzing trace with hash 1754015376, now seen corresponding path program 1 times [2021-12-16 00:59:13,720 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:13,720 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1021484780] [2021-12-16 00:59:13,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:13,720 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:13,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:13,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:13,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:13,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 00:59:13,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:13,762 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:13,762 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:13,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1021484780] [2021-12-16 00:59:13,762 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1021484780] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:13,762 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:13,762 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:13,762 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1639656642] [2021-12-16 00:59:13,762 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:13,763 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:13,763 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:13,763 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:13,763 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:13,763 INFO L87 Difference]: Start difference. First operand 375 states and 489 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 00:59:14,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:14,027 INFO L93 Difference]: Finished difference Result 930 states and 1231 transitions. [2021-12-16 00:59:14,027 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:59:14,027 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2021-12-16 00:59:14,028 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:14,030 INFO L225 Difference]: With dead ends: 930 [2021-12-16 00:59:14,030 INFO L226 Difference]: Without dead ends: 563 [2021-12-16 00:59:14,031 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-16 00:59:14,032 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 130 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 221 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 270 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 221 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:14,032 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [137 Valid, 254 Invalid, 270 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 221 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:14,036 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 563 states. [2021-12-16 00:59:14,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 563 to 544. [2021-12-16 00:59:14,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 544 states, 395 states have (on average 1.268354430379747) internal successors, (501), 432 states have internal predecessors, (501), 80 states have call successors, (80), 68 states have call predecessors, (80), 68 states have return successors, (105), 74 states have call predecessors, (105), 80 states have call successors, (105) [2021-12-16 00:59:14,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 544 states to 544 states and 686 transitions. [2021-12-16 00:59:14,085 INFO L78 Accepts]: Start accepts. Automaton has 544 states and 686 transitions. Word has length 38 [2021-12-16 00:59:14,085 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:14,085 INFO L470 AbstractCegarLoop]: Abstraction has 544 states and 686 transitions. [2021-12-16 00:59:14,085 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 00:59:14,085 INFO L276 IsEmpty]: Start isEmpty. Operand 544 states and 686 transitions. [2021-12-16 00:59:14,089 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-16 00:59:14,089 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:14,089 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:14,089 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 00:59:14,089 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:14,089 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:14,089 INFO L85 PathProgramCache]: Analyzing trace with hash 684559813, now seen corresponding path program 1 times [2021-12-16 00:59:14,090 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:14,090 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1657363128] [2021-12-16 00:59:14,090 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:14,090 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:14,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:14,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:14,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:14,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:14,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-16 00:59:14,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,165 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:14,165 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:14,165 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1657363128] [2021-12-16 00:59:14,165 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1657363128] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:14,165 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:14,165 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:59:14,165 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [347682462] [2021-12-16 00:59:14,166 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:14,166 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:14,166 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:14,166 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:14,166 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:14,166 INFO L87 Difference]: Start difference. First operand 544 states and 686 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 00:59:14,400 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:14,401 INFO L93 Difference]: Finished difference Result 1196 states and 1547 transitions. [2021-12-16 00:59:14,401 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 00:59:14,402 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2021-12-16 00:59:14,403 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:14,406 INFO L225 Difference]: With dead ends: 1196 [2021-12-16 00:59:14,406 INFO L226 Difference]: Without dead ends: 660 [2021-12-16 00:59:14,407 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:59:14,410 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 136 mSDsluCounter, 179 mSDsCounter, 0 mSdLazyCounter, 274 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 270 SdHoareTripleChecker+Invalid, 334 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 274 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:14,413 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [137 Valid, 270 Invalid, 334 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 274 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:14,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 660 states. [2021-12-16 00:59:14,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 660 to 638. [2021-12-16 00:59:14,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 638 states, 469 states have (on average 1.2430703624733475) internal successors, (583), 506 states have internal predecessors, (583), 88 states have call successors, (88), 68 states have call predecessors, (88), 80 states have return successors, (125), 90 states have call predecessors, (125), 88 states have call successors, (125) [2021-12-16 00:59:14,447 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 638 states to 638 states and 796 transitions. [2021-12-16 00:59:14,447 INFO L78 Accepts]: Start accepts. Automaton has 638 states and 796 transitions. Word has length 61 [2021-12-16 00:59:14,448 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:14,448 INFO L470 AbstractCegarLoop]: Abstraction has 638 states and 796 transitions. [2021-12-16 00:59:14,448 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 00:59:14,448 INFO L276 IsEmpty]: Start isEmpty. Operand 638 states and 796 transitions. [2021-12-16 00:59:14,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-16 00:59:14,450 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:14,450 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:14,450 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-16 00:59:14,450 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:14,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:14,450 INFO L85 PathProgramCache]: Analyzing trace with hash 1386159687, now seen corresponding path program 1 times [2021-12-16 00:59:14,451 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:14,451 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [393676912] [2021-12-16 00:59:14,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:14,451 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:14,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:14,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:14,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:14,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:14,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-16 00:59:14,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,561 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:14,561 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:14,561 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [393676912] [2021-12-16 00:59:14,561 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [393676912] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:14,561 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:14,561 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-16 00:59:14,561 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [606852587] [2021-12-16 00:59:14,561 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:14,562 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 00:59:14,562 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:14,562 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 00:59:14,562 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-12-16 00:59:14,563 INFO L87 Difference]: Start difference. First operand 638 states and 796 transitions. Second operand has 8 states, 8 states have (on average 6.0) internal successors, (48), 6 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 00:59:14,784 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:14,784 INFO L93 Difference]: Finished difference Result 1314 states and 1685 transitions. [2021-12-16 00:59:14,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-16 00:59:14,785 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.0) internal successors, (48), 6 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2021-12-16 00:59:14,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:14,787 INFO L225 Difference]: With dead ends: 1314 [2021-12-16 00:59:14,787 INFO L226 Difference]: Without dead ends: 684 [2021-12-16 00:59:14,789 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=42, Invalid=114, Unknown=0, NotChecked=0, Total=156 [2021-12-16 00:59:14,789 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 191 mSDsluCounter, 160 mSDsCounter, 0 mSdLazyCounter, 370 mSolverCounterSat, 71 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 192 SdHoareTripleChecker+Valid, 251 SdHoareTripleChecker+Invalid, 441 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 71 IncrementalHoareTripleChecker+Valid, 370 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:14,790 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [192 Valid, 251 Invalid, 441 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [71 Valid, 370 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:14,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 684 states. [2021-12-16 00:59:14,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 684 to 646. [2021-12-16 00:59:14,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 646 states, 477 states have (on average 1.2389937106918238) internal successors, (591), 514 states have internal predecessors, (591), 88 states have call successors, (88), 68 states have call predecessors, (88), 80 states have return successors, (125), 90 states have call predecessors, (125), 88 states have call successors, (125) [2021-12-16 00:59:14,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 646 states to 646 states and 804 transitions. [2021-12-16 00:59:14,819 INFO L78 Accepts]: Start accepts. Automaton has 646 states and 804 transitions. Word has length 61 [2021-12-16 00:59:14,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:14,819 INFO L470 AbstractCegarLoop]: Abstraction has 646 states and 804 transitions. [2021-12-16 00:59:14,819 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.0) internal successors, (48), 6 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-16 00:59:14,819 INFO L276 IsEmpty]: Start isEmpty. Operand 646 states and 804 transitions. [2021-12-16 00:59:14,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-16 00:59:14,820 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:14,821 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:14,821 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-16 00:59:14,821 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:14,821 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:14,821 INFO L85 PathProgramCache]: Analyzing trace with hash 1313773129, now seen corresponding path program 1 times [2021-12-16 00:59:14,821 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:14,822 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1915150596] [2021-12-16 00:59:14,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:14,822 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:14,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:14,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-16 00:59:14,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:14,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:14,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-16 00:59:14,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:14,872 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:14,872 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:14,872 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1915150596] [2021-12-16 00:59:14,872 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1915150596] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:14,872 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:14,872 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:14,872 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [439565252] [2021-12-16 00:59:14,873 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:14,873 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:14,873 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:14,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:14,873 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:14,874 INFO L87 Difference]: Start difference. First operand 646 states and 804 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-16 00:59:15,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:15,139 INFO L93 Difference]: Finished difference Result 1896 states and 2463 transitions. [2021-12-16 00:59:15,140 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-16 00:59:15,140 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2021-12-16 00:59:15,141 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:15,146 INFO L225 Difference]: With dead ends: 1896 [2021-12-16 00:59:15,146 INFO L226 Difference]: Without dead ends: 1258 [2021-12-16 00:59:15,148 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:59:15,149 INFO L933 BasicCegarLoop]: 141 mSDtfsCounter, 343 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 262 mSolverCounterSat, 142 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 346 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 404 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 142 IncrementalHoareTripleChecker+Valid, 262 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:15,149 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [346 Valid, 289 Invalid, 404 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [142 Valid, 262 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:15,150 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1258 states. [2021-12-16 00:59:15,197 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1258 to 1246. [2021-12-16 00:59:15,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1246 states, 927 states have (on average 1.2179072276159655) internal successors, (1129), 988 states have internal predecessors, (1129), 166 states have call successors, (166), 150 states have call predecessors, (166), 152 states have return successors, (269), 162 states have call predecessors, (269), 166 states have call successors, (269) [2021-12-16 00:59:15,203 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1246 states to 1246 states and 1564 transitions. [2021-12-16 00:59:15,203 INFO L78 Accepts]: Start accepts. Automaton has 1246 states and 1564 transitions. Word has length 61 [2021-12-16 00:59:15,203 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:15,203 INFO L470 AbstractCegarLoop]: Abstraction has 1246 states and 1564 transitions. [2021-12-16 00:59:15,204 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-16 00:59:15,204 INFO L276 IsEmpty]: Start isEmpty. Operand 1246 states and 1564 transitions. [2021-12-16 00:59:15,205 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-16 00:59:15,205 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:15,205 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:15,205 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-16 00:59:15,205 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:15,206 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:15,206 INFO L85 PathProgramCache]: Analyzing trace with hash 205893359, now seen corresponding path program 1 times [2021-12-16 00:59:15,206 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:15,206 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1363258718] [2021-12-16 00:59:15,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:15,206 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:15,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:15,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:15,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:15,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 00:59:15,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:15,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-16 00:59:15,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:15,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:15,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:15,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:15,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:15,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-16 00:59:15,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:15,350 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-16 00:59:15,351 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:15,351 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1363258718] [2021-12-16 00:59:15,351 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1363258718] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:15,351 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [309032408] [2021-12-16 00:59:15,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:15,351 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:15,351 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:15,352 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:15,353 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 00:59:15,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:15,435 INFO L263 TraceCheckSpWp]: Trace formula consists of 398 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-16 00:59:15,439 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:15,672 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:15,672 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:59:15,673 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [309032408] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:15,673 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:59:15,673 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2021-12-16 00:59:15,673 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1230378476] [2021-12-16 00:59:15,673 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:15,673 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 00:59:15,673 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:15,673 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 00:59:15,674 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=332, Unknown=0, NotChecked=0, Total=380 [2021-12-16 00:59:15,674 INFO L87 Difference]: Start difference. First operand 1246 states and 1564 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2021-12-16 00:59:15,825 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:15,826 INFO L93 Difference]: Finished difference Result 2440 states and 3074 transitions. [2021-12-16 00:59:15,826 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:59:15,826 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 65 [2021-12-16 00:59:15,826 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:15,831 INFO L225 Difference]: With dead ends: 2440 [2021-12-16 00:59:15,831 INFO L226 Difference]: Without dead ends: 1202 [2021-12-16 00:59:15,834 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 87 GetRequests, 69 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=332, Unknown=0, NotChecked=0, Total=380 [2021-12-16 00:59:15,835 INFO L933 BasicCegarLoop]: 196 mSDtfsCounter, 71 mSDsluCounter, 909 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 1105 SdHoareTripleChecker+Invalid, 195 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:15,835 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [75 Valid, 1105 Invalid, 195 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:15,836 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1202 states. [2021-12-16 00:59:15,871 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1202 to 1198. [2021-12-16 00:59:15,873 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1198 states, 889 states have (on average 1.201349831271091) internal successors, (1068), 948 states have internal predecessors, (1068), 162 states have call successors, (162), 146 states have call predecessors, (162), 146 states have return successors, (236), 156 states have call predecessors, (236), 162 states have call successors, (236) [2021-12-16 00:59:15,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1198 states to 1198 states and 1466 transitions. [2021-12-16 00:59:15,877 INFO L78 Accepts]: Start accepts. Automaton has 1198 states and 1466 transitions. Word has length 65 [2021-12-16 00:59:15,877 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:15,877 INFO L470 AbstractCegarLoop]: Abstraction has 1198 states and 1466 transitions. [2021-12-16 00:59:15,877 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2021-12-16 00:59:15,877 INFO L276 IsEmpty]: Start isEmpty. Operand 1198 states and 1466 transitions. [2021-12-16 00:59:15,880 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2021-12-16 00:59:15,880 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:15,880 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:15,900 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-16 00:59:16,095 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:16,095 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:16,096 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:16,096 INFO L85 PathProgramCache]: Analyzing trace with hash 1582774687, now seen corresponding path program 1 times [2021-12-16 00:59:16,096 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:16,096 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [511176111] [2021-12-16 00:59:16,096 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:16,096 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:16,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:16,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-16 00:59:16,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:59:16,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:16,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:16,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-16 00:59:16,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-16 00:59:16,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-16 00:59:16,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:16,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-16 00:59:16,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:16,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-12-16 00:59:16,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,299 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-16 00:59:16,300 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:16,300 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [511176111] [2021-12-16 00:59:16,300 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [511176111] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:16,300 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [206934582] [2021-12-16 00:59:16,300 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:16,300 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:16,300 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:16,301 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:16,302 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-16 00:59:16,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:16,383 INFO L263 TraceCheckSpWp]: Trace formula consists of 510 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-16 00:59:16,389 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:16,607 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-16 00:59:16,608 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:59:16,608 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [206934582] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:16,608 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:59:16,608 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2021-12-16 00:59:16,608 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2116381559] [2021-12-16 00:59:16,608 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:16,608 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 00:59:16,608 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:16,609 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 00:59:16,609 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=329, Unknown=0, NotChecked=0, Total=380 [2021-12-16 00:59:16,609 INFO L87 Difference]: Start difference. First operand 1198 states and 1466 transitions. Second operand has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2021-12-16 00:59:16,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:16,707 INFO L93 Difference]: Finished difference Result 2058 states and 2546 transitions. [2021-12-16 00:59:16,707 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:59:16,708 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 110 [2021-12-16 00:59:16,708 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:16,708 INFO L225 Difference]: With dead ends: 2058 [2021-12-16 00:59:16,708 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 00:59:16,712 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 146 GetRequests, 126 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=63, Invalid=399, Unknown=0, NotChecked=0, Total=462 [2021-12-16 00:59:16,712 INFO L933 BasicCegarLoop]: 193 mSDtfsCounter, 76 mSDsluCounter, 674 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 867 SdHoareTripleChecker+Invalid, 121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:16,712 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [80 Valid, 867 Invalid, 121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:16,713 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 00:59:16,713 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 00:59:16,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 00:59:16,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 00:59:16,713 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2021-12-16 00:59:16,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:16,713 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 00:59:16,713 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2021-12-16 00:59:16,713 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 00:59:16,713 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 00:59:16,715 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 00:59:16,737 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-16 00:59:16,932 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-16 00:59:16,934 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 00:59:20,539 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 378 385) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2021-12-16 00:59:20,539 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 378 385) no Hoare annotation was computed. [2021-12-16 00:59:20,539 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 378 385) no Hoare annotation was computed. [2021-12-16 00:59:20,539 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 294 300) no Hoare annotation was computed. [2021-12-16 00:59:20,539 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 294 300) the Hoare annotation is: true [2021-12-16 00:59:20,540 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse1 (= ~methaneLevelCritical~0 0))) (and (or (= 0 ~systemActive~0) .cse0 .cse1) (or .cse2 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|) (not (<= 1 |old(~methaneLevelCritical~0)|))) (or .cse0 .cse2 .cse1))) [2021-12-16 00:59:20,540 INFO L858 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2021-12-16 00:59:20,540 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2021-12-16 00:59:20,540 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 901 930) no Hoare annotation was computed. [2021-12-16 00:59:20,540 INFO L861 garLoopResultBuilder]: At program point L926(lines 901 930) the Hoare annotation is: true [2021-12-16 00:59:20,540 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 901 930) the Hoare annotation is: true [2021-12-16 00:59:20,540 INFO L858 garLoopResultBuilder]: For program point L922(line 922) no Hoare annotation was computed. [2021-12-16 00:59:20,540 INFO L858 garLoopResultBuilder]: For program point L915(lines 915 919) no Hoare annotation was computed. [2021-12-16 00:59:20,540 INFO L861 garLoopResultBuilder]: At program point L915-1(lines 915 919) the Hoare annotation is: true [2021-12-16 00:59:20,541 INFO L858 garLoopResultBuilder]: For program point L912(line 912) no Hoare annotation was computed. [2021-12-16 00:59:20,541 INFO L861 garLoopResultBuilder]: At program point L911-2(lines 911 925) the Hoare annotation is: true [2021-12-16 00:59:20,541 INFO L861 garLoopResultBuilder]: At program point L907(line 907) the Hoare annotation is: true [2021-12-16 00:59:20,541 INFO L858 garLoopResultBuilder]: For program point L907-1(line 907) no Hoare annotation was computed. [2021-12-16 00:59:20,541 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 270 293) no Hoare annotation was computed. [2021-12-16 00:59:20,541 INFO L858 garLoopResultBuilder]: For program point L895(line 895) no Hoare annotation was computed. [2021-12-16 00:59:20,541 INFO L858 garLoopResultBuilder]: For program point L507(lines 507 517) no Hoare annotation was computed. [2021-12-16 00:59:20,541 INFO L858 garLoopResultBuilder]: For program point L503(lines 503 520) no Hoare annotation was computed. [2021-12-16 00:59:20,541 INFO L854 garLoopResultBuilder]: At program point L342(line 342) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse3 .cse0) (or .cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1))) [2021-12-16 00:59:20,542 INFO L854 garLoopResultBuilder]: At program point L503-1(lines 495 523) the Hoare annotation is: (let ((.cse8 (= 0 ~systemActive~0))) (let ((.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse13 (<= 2 ~waterLevel~0)) (.cse9 (not .cse8))) (let ((.cse0 (and .cse11 .cse14 .cse13 .cse9)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (and .cse11 .cse10)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse5 (= ~waterLevel~0 1)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not .cse14))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse1) (or .cse6 .cse7 .cse1) (or .cse8 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse9 .cse10) .cse6 (and .cse7 .cse9 .cse10)) (or .cse8 .cse0 (and .cse11 .cse7) .cse2 .cse3) (or .cse4 .cse5 .cse1 .cse2) (or .cse12 .cse6 .cse1 .cse13) (or .cse12 .cse1 .cse13 .cse2))))) [2021-12-16 00:59:20,542 INFO L854 garLoopResultBuilder]: At program point L338(line 338) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse1) .cse2) (or .cse3 .cse4) (or .cse2 .cse3) (or .cse0 .cse1 .cse4))) [2021-12-16 00:59:20,542 INFO L854 garLoopResultBuilder]: At program point L334(line 334) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 .cse1) (or .cse2 .cse0) (or .cse3 .cse4 .cse1) (or .cse3 .cse2 .cse4))) [2021-12-16 00:59:20,542 INFO L858 garLoopResultBuilder]: For program point L334-1(line 334) no Hoare annotation was computed. [2021-12-16 00:59:20,542 INFO L854 garLoopResultBuilder]: At program point L896(lines 891 898) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse3 .cse0) (or .cse2 .cse1))) [2021-12-16 00:59:20,542 INFO L858 garLoopResultBuilder]: For program point L508(lines 508 514) no Hoare annotation was computed. [2021-12-16 00:59:20,543 INFO L854 garLoopResultBuilder]: At program point L347(line 347) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse10 (= ~methaneLevelCritical~0 0)) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (not .cse9)) (.cse13 (= ~pumpRunning~0 0)) (.cse14 (<= 1 ~methaneLevelCritical~0))) (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= ~waterLevel~0 1)) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (<= 2 ~waterLevel~0)) (.cse2 (not .cse14)) (.cse5 (and .cse11 .cse14 .cse12 .cse13)) (.cse8 (and .cse10 .cse11 .cse12 .cse13)) (.cse4 (not .cse10))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse3 .cse4) (or .cse2 .cse3 .cse5) (or .cse6 .cse3 .cse7 .cse4) (or .cse8 .cse3 .cse4) (or .cse6 .cse2 .cse3 .cse7) (or .cse9 .cse2 .cse5) (or .cse9 .cse8 .cse4))))) [2021-12-16 00:59:20,543 INFO L854 garLoopResultBuilder]: At program point L347-1(lines 328 352) the Hoare annotation is: (let ((.cse8 (= 0 ~systemActive~0))) (let ((.cse11 (<= 2 ~waterLevel~0)) (.cse13 (= ~methaneLevelCritical~0 0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (<= 1 ~methaneLevelCritical~0)) (.cse7 (not .cse8)) (.cse10 (= ~pumpRunning~0 0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse5 (= ~waterLevel~0 1)) (.cse9 (and .cse12 .cse14 .cse7 .cse10)) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not .cse14)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not .cse13)) (.cse3 (and .cse13 .cse11 .cse7))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse1) (or .cse4 .cse5 .cse1 .cse2) (or .cse1 .cse2 .cse7) (or .cse8 .cse6 .cse9 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse10)) (or .cse6 .cse1 .cse9) (or .cse0 .cse6 .cse1 .cse11) (or .cse8 .cse12 .cse2 .cse10 .cse3))))) [2021-12-16 00:59:20,543 INFO L858 garLoopResultBuilder]: For program point L281-1(lines 281 287) no Hoare annotation was computed. [2021-12-16 00:59:20,543 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2021-12-16 00:59:20,543 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 .cse1) (or .cse2 .cse0) (or .cse3 .cse4 .cse1) (or .cse3 .cse2 .cse4))) [2021-12-16 00:59:20,543 INFO L854 garLoopResultBuilder]: At program point L501(line 501) the Hoare annotation is: (let ((.cse10 (<= 2 ~waterLevel~0)) (.cse7 (= 0 ~systemActive~0)) (.cse11 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= ~waterLevel~0 1)) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not .cse11)) (.cse5 (and .cse11 .cse10 (not .cse7))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse3 .cse4) (or .cse7 (and .cse8 .cse6) .cse2 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse6)) (or .cse9 .cse2 .cse3 .cse10) (or .cse9 .cse3 .cse10 .cse4) (or .cse7 .cse8 .cse4 .cse6 .cse5) (or .cse2 .cse3 .cse6)))) [2021-12-16 00:59:20,543 INFO L858 garLoopResultBuilder]: For program point L501-1(line 501) no Hoare annotation was computed. [2021-12-16 00:59:20,544 INFO L854 garLoopResultBuilder]: At program point L402(lines 397 405) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= 0 ~systemActive~0)) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse3 (= ~pumpRunning~0 0))) (and (or (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1) .cse0 .cse1) (or (and .cse2 .cse3) .cse0 .cse1) (or .cse1 .cse4) (or .cse5 .cse4) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (<= 2 ~waterLevel~0)) (or .cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse0 (and .cse2 (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse3)))) [2021-12-16 00:59:20,544 INFO L858 garLoopResultBuilder]: For program point L274-1(lines 273 292) no Hoare annotation was computed. [2021-12-16 00:59:20,544 INFO L858 garLoopResultBuilder]: For program point L336(lines 336 344) no Hoare annotation was computed. [2021-12-16 00:59:20,544 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 270 293) the Hoare annotation is: (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= ~waterLevel~0 1)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse5 (= 0 ~systemActive~0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse2 .cse6) (or .cse0 .cse1 .cse3 .cse7) (or .cse4 .cse3 .cse6 .cse7) (or .cse5 .cse8 .cse7) (or .cse4 .cse2 .cse3 .cse6) (or .cse3 .cse7 .cse9) (or .cse4 .cse5 .cse6 .cse7) (or .cse2 .cse3 .cse9) (or .cse5 .cse2 .cse8))) [2021-12-16 00:59:20,544 INFO L858 garLoopResultBuilder]: For program point L332(lines 332 349) no Hoare annotation was computed. [2021-12-16 00:59:20,544 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 270 293) no Hoare annotation was computed. [2021-12-16 00:59:20,544 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 895) no Hoare annotation was computed. [2021-12-16 00:59:20,545 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 95 103) the Hoare annotation is: true [2021-12-16 00:59:20,545 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 95 103) no Hoare annotation was computed. [2021-12-16 00:59:20,545 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2021-12-16 00:59:20,545 INFO L854 garLoopResultBuilder]: At program point L225(line 225) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 (<= 1 ~methaneLevelCritical~0) .cse4) (and .cse0 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2021-12-16 00:59:20,545 INFO L854 garLoopResultBuilder]: At program point L481(lines 476 483) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3) (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2 .cse3))) [2021-12-16 00:59:20,545 INFO L854 garLoopResultBuilder]: At program point L250(lines 203 252) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 (<= 1 ~methaneLevelCritical~0) .cse4) (and .cse0 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2021-12-16 00:59:20,545 INFO L854 garLoopResultBuilder]: At program point L473(lines 461 475) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2 .cse3) (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3))) [2021-12-16 00:59:20,546 INFO L854 garLoopResultBuilder]: At program point L184(lines 179 187) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:20,546 INFO L858 garLoopResultBuilder]: For program point L213(lines 213 219) no Hoare annotation was computed. [2021-12-16 00:59:20,546 INFO L858 garLoopResultBuilder]: For program point L213-1(lines 213 219) no Hoare annotation was computed. [2021-12-16 00:59:20,546 INFO L858 garLoopResultBuilder]: For program point L465(lines 465 471) no Hoare annotation was computed. [2021-12-16 00:59:20,546 INFO L854 garLoopResultBuilder]: At program point L176(lines 172 178) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:20,546 INFO L858 garLoopResultBuilder]: For program point L465-1(lines 465 471) no Hoare annotation was computed. [2021-12-16 00:59:20,546 INFO L858 garLoopResultBuilder]: For program point L205(lines 205 209) no Hoare annotation was computed. [2021-12-16 00:59:20,546 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 00:59:20,546 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 00:59:20,546 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 00:59:20,547 INFO L861 garLoopResultBuilder]: At program point L970(lines 962 972) the Hoare annotation is: true [2021-12-16 00:59:20,547 INFO L854 garLoopResultBuilder]: At program point L169(lines 165 171) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:20,547 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 00:59:20,547 INFO L861 garLoopResultBuilder]: At program point L256(lines 193 260) the Hoare annotation is: true [2021-12-16 00:59:20,547 INFO L858 garLoopResultBuilder]: For program point L223(lines 223 229) no Hoare annotation was computed. [2021-12-16 00:59:20,547 INFO L858 garLoopResultBuilder]: For program point L223-1(lines 223 229) no Hoare annotation was computed. [2021-12-16 00:59:20,547 INFO L858 garLoopResultBuilder]: For program point L983(lines 983 990) no Hoare annotation was computed. [2021-12-16 00:59:20,547 INFO L854 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 (<= 1 ~methaneLevelCritical~0) .cse4) (and .cse0 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2021-12-16 00:59:20,547 INFO L858 garLoopResultBuilder]: For program point L983-2(lines 983 990) no Hoare annotation was computed. [2021-12-16 00:59:20,548 INFO L854 garLoopResultBuilder]: At program point L467(line 467) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3) (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2 .cse3))) [2021-12-16 00:59:20,548 INFO L854 garLoopResultBuilder]: At program point L492(lines 487 494) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 |ULTIMATE.start_main_~tmp~9#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:20,548 INFO L861 garLoopResultBuilder]: At program point L992(lines 973 995) the Hoare annotation is: true [2021-12-16 00:59:20,548 INFO L854 garLoopResultBuilder]: At program point L959(lines 955 961) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 |ULTIMATE.start_main_~tmp~9#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:20,548 INFO L854 garLoopResultBuilder]: At program point L253(lines 202 254) the Hoare annotation is: false [2021-12-16 00:59:20,548 INFO L858 garLoopResultBuilder]: For program point L241(lines 241 247) no Hoare annotation was computed. [2021-12-16 00:59:20,548 INFO L854 garLoopResultBuilder]: At program point L241-2(lines 233 248) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse6))) [2021-12-16 00:59:20,548 INFO L858 garLoopResultBuilder]: For program point L204(lines 203 252) no Hoare annotation was computed. [2021-12-16 00:59:20,548 INFO L858 garLoopResultBuilder]: For program point L233(lines 233 248) no Hoare annotation was computed. [2021-12-16 00:59:20,549 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2021-12-16 00:59:20,549 INFO L858 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2021-12-16 00:59:20,549 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (<= 2 ~waterLevel~0))) (and (or .cse0 (= 0 ~systemActive~0) .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse5 .cse1 .cse2) (or .cse3 .cse5 .cse4 .cse2) (or .cse0 .cse5 .cse6 .cse1))) [2021-12-16 00:59:20,549 INFO L854 garLoopResultBuilder]: At program point L316(line 316) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (= |processEnvironment__wrappee__methaneQuery_~tmp~1#1| 0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2) (not (= |old(~pumpRunning~0)| 0))) (or .cse0 (and .cse1 .cse2 (= ~pumpRunning~0 0)) (not (= ~methaneLevelCritical~0 0))))) [2021-12-16 00:59:20,549 INFO L858 garLoopResultBuilder]: For program point L310(lines 310 318) no Hoare annotation was computed. [2021-12-16 00:59:20,549 INFO L858 garLoopResultBuilder]: For program point L306(lines 306 323) no Hoare annotation was computed. [2021-12-16 00:59:20,549 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse3 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0))) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 (and .cse1 .cse2) (and .cse3 .cse2) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or .cse0 (and .cse3 .cse4 .cse2) (and .cse4 .cse1 .cse2) (not (= ~methaneLevelCritical~0 0)))))) [2021-12-16 00:59:20,549 INFO L858 garLoopResultBuilder]: For program point L368(lines 368 374) no Hoare annotation was computed. [2021-12-16 00:59:20,550 INFO L854 garLoopResultBuilder]: At program point L366(line 366) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2021-12-16 00:59:20,550 INFO L854 garLoopResultBuilder]: At program point L368-2(lines 361 377) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or .cse0 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~3#1|) .cse1 (= ~pumpRunning~0 0)) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 00:59:20,550 INFO L858 garLoopResultBuilder]: For program point L366-1(line 366) no Hoare annotation was computed. [2021-12-16 00:59:20,550 INFO L854 garLoopResultBuilder]: At program point L457(lines 442 460) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse1 (not (= 0 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~4#1|))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0)) (.cse4 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse2 .cse6 .cse5) (not (= ~methaneLevelCritical~0 0))) (or .cse0 (and .cse6 .cse5) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) (and .cse1 .cse2 .cse3 .cse4)))) [2021-12-16 00:59:20,550 INFO L854 garLoopResultBuilder]: At program point L358(lines 353 360) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0))) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-16 00:59:20,550 INFO L858 garLoopResultBuilder]: For program point L451(lines 451 455) no Hoare annotation was computed. [2021-12-16 00:59:20,550 INFO L858 garLoopResultBuilder]: For program point L451-2(lines 451 455) no Hoare annotation was computed. [2021-12-16 00:59:20,550 INFO L854 garLoopResultBuilder]: At program point L321(line 321) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= 0 ~systemActive~0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2))) [2021-12-16 00:59:20,550 INFO L858 garLoopResultBuilder]: For program point L321-1(lines 302 326) no Hoare annotation was computed. [2021-12-16 00:59:20,551 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 302 326) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0))))) [2021-12-16 00:59:20,551 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2021-12-16 00:59:20,551 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 302 326) no Hoare annotation was computed. [2021-12-16 00:59:20,551 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 386 396) the Hoare annotation is: true [2021-12-16 00:59:20,551 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 386 396) no Hoare annotation was computed. [2021-12-16 00:59:20,551 INFO L861 garLoopResultBuilder]: At program point L391(line 391) the Hoare annotation is: true [2021-12-16 00:59:20,551 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 386 396) no Hoare annotation was computed. [2021-12-16 00:59:20,551 INFO L858 garLoopResultBuilder]: For program point L391-1(line 391) no Hoare annotation was computed. [2021-12-16 00:59:20,553 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:20,554 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 00:59:20,570 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 12:59:20 BoogieIcfgContainer [2021-12-16 00:59:20,570 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 00:59:20,571 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 00:59:20,571 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 00:59:20,571 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 00:59:20,571 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:12" (3/4) ... [2021-12-16 00:59:20,573 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 00:59:20,577 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-16 00:59:20,577 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 00:59:20,577 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 00:59:20,577 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 00:59:20,577 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 00:59:20,577 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-16 00:59:20,577 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 00:59:20,578 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-16 00:59:20,578 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-16 00:59:20,582 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 49 nodes and edges [2021-12-16 00:59:20,583 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 00:59:20,583 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 00:59:20,583 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 00:59:20,584 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 00:59:20,584 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:59:20,584 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:59:20,599 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == 1) && pumpRunning == 0 [2021-12-16 00:59:20,599 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 [2021-12-16 00:59:20,599 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 [2021-12-16 00:59:20,599 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= methaneLevelCritical) && pumpRunning == 0)) || ((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) [2021-12-16 00:59:20,601 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0))) && ((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0))) && ((0 == systemActive || !(1 <= methaneLevelCritical)) || pumpRunning == \old(pumpRunning)) [2021-12-16 00:59:20,602 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(2 <= \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)) || (1 <= tmp && pumpRunning == 0))) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || (((pumpRunning == \old(pumpRunning) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel)) && ((((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) [2021-12-16 00:59:20,602 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= methaneLevelCritical) && systemActive == 1) || ((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && systemActive == 1) [2021-12-16 00:59:20,603 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0)) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && ((!(1 <= methaneLevelCritical) || pumpRunning == \old(pumpRunning)) || !(\old(pumpRunning) == 0))) && (((0 == systemActive || ((1 <= tmp && !(0 == systemActive)) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && !(0 == systemActive)) && pumpRunning == 0))) && ((((0 == systemActive || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || (tmp == 0 && pumpRunning == \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0))) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel)) && (((!(2 <= \old(waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2021-12-16 00:59:20,603 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= methaneLevelCritical) && pumpRunning == 0) [2021-12-16 00:59:20,603 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) && (((\result == 0 && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (0 == systemActive || !(methaneLevelCritical == 0))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel)) && (((0 == systemActive || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || ((\result == 0 && 1 <= tmp) && pumpRunning == 0)) [2021-12-16 00:59:20,603 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((0 == systemActive || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && (((0 == systemActive || ((methaneLevelCritical <= tmp && 2 <= waterLevel) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) [2021-12-16 00:59:20,603 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((0 == systemActive || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && ((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) [2021-12-16 00:59:20,603 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || (!(\result == 0) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) && (((0 == systemActive || ((!(\result == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) [2021-12-16 00:59:20,604 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (0 == systemActive || !(1 <= methaneLevelCritical))) && (!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0))) && (0 == systemActive || !(methaneLevelCritical == 0)) [2021-12-16 00:59:20,604 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == systemActive || ((((!(0 == tmp) && pumpRunning == \old(pumpRunning)) && tmp___0 == 0) && \result == 0) && pumpRunning == 0)) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) && ((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || (((!(0 == tmp) && pumpRunning == \old(pumpRunning)) && tmp___0 == 0) && \result == 0)) [2021-12-16 00:59:20,629 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 00:59:20,629 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 00:59:20,630 INFO L158 Benchmark]: Toolchain (without parser) took 8707.37ms. Allocated memory was 88.1MB in the beginning and 167.8MB in the end (delta: 79.7MB). Free memory was 48.4MB in the beginning and 57.2MB in the end (delta: -8.8MB). Peak memory consumption was 72.2MB. Max. memory is 16.1GB. [2021-12-16 00:59:20,630 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 88.1MB. Free memory is still 65.3MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 00:59:20,630 INFO L158 Benchmark]: CACSL2BoogieTranslator took 308.02ms. Allocated memory was 88.1MB in the beginning and 111.1MB in the end (delta: 23.1MB). Free memory was 48.2MB in the beginning and 78.7MB in the end (delta: -30.5MB). Peak memory consumption was 10.6MB. Max. memory is 16.1GB. [2021-12-16 00:59:20,631 INFO L158 Benchmark]: Boogie Procedure Inliner took 57.91ms. Allocated memory is still 111.1MB. Free memory was 78.7MB in the beginning and 76.6MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:59:20,631 INFO L158 Benchmark]: Boogie Preprocessor took 46.99ms. Allocated memory is still 111.1MB. Free memory was 76.6MB in the beginning and 75.2MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:59:20,631 INFO L158 Benchmark]: RCFGBuilder took 422.25ms. Allocated memory is still 111.1MB. Free memory was 75.2MB in the beginning and 57.1MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-16 00:59:20,632 INFO L158 Benchmark]: TraceAbstraction took 7808.36ms. Allocated memory was 111.1MB in the beginning and 167.8MB in the end (delta: 56.6MB). Free memory was 57.0MB in the beginning and 64.6MB in the end (delta: -7.6MB). Peak memory consumption was 74.7MB. Max. memory is 16.1GB. [2021-12-16 00:59:20,632 INFO L158 Benchmark]: Witness Printer took 58.92ms. Allocated memory is still 167.8MB. Free memory was 64.6MB in the beginning and 57.2MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-16 00:59:20,633 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 88.1MB. Free memory is still 65.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 308.02ms. Allocated memory was 88.1MB in the beginning and 111.1MB in the end (delta: 23.1MB). Free memory was 48.2MB in the beginning and 78.7MB in the end (delta: -30.5MB). Peak memory consumption was 10.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 57.91ms. Allocated memory is still 111.1MB. Free memory was 78.7MB in the beginning and 76.6MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 46.99ms. Allocated memory is still 111.1MB. Free memory was 76.6MB in the beginning and 75.2MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 422.25ms. Allocated memory is still 111.1MB. Free memory was 75.2MB in the beginning and 57.1MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 7808.36ms. Allocated memory was 111.1MB in the beginning and 167.8MB in the end (delta: 56.6MB). Free memory was 57.0MB in the beginning and 64.6MB in the end (delta: -7.6MB). Peak memory consumption was 74.7MB. Max. memory is 16.1GB. * Witness Printer took 58.92ms. Allocated memory is still 167.8MB. Free memory was 64.6MB in the beginning and 57.2MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 895]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 103 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.7s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.6s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1377 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1350 mSDsluCounter, 4394 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3089 mSDsCounter, 384 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1620 IncrementalHoareTripleChecker+Invalid, 2004 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 384 mSolverCounterUnsat, 1305 mSDtfsCounter, 1620 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 346 GetRequests, 255 SyntacticMatches, 0 SemanticMatches, 91 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 84 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1246occurred in iteration=8, InterpolantAutomatonStates: 74, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 126 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 47 LocationsWithAnnotation, 2684 PreInvPairs, 3173 NumberOfFragments, 1943 HoareAnnotationTreeSize, 2684 FomulaSimplifications, 412 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 47 FomulaSimplificationsInter, 21859 FormulaSimplificationTreeSizeReductionInter, 3.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 687 NumberOfCodeBlocks, 687 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 675 ConstructedInterpolants, 0 QuantifiedInterpolants, 1275 SizeOfPredicates, 6 NumberOfNonLiveVariables, 908 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 12 InterpolantComputations, 10 PerfectInterpolantSequences, 100/105 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((0 == systemActive || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && (((0 == systemActive || ((methaneLevelCritical <= tmp && 2 <= waterLevel) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: ((0 == systemActive || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && ((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || (!(\result == 0) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) && (((0 == systemActive || ((!(\result == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 911]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 495]: Loop Invariant Derived loop invariant: ((((((((((((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0)) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && ((!(1 <= methaneLevelCritical) || pumpRunning == \old(pumpRunning)) || !(\old(pumpRunning) == 0))) && (((0 == systemActive || ((1 <= tmp && !(0 == systemActive)) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && !(0 == systemActive)) && pumpRunning == 0))) && ((((0 == systemActive || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || (tmp == 0 && pumpRunning == \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0))) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel)) && (((!(2 <= \old(waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: (((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= methaneLevelCritical) && pumpRunning == 0)) || ((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= methaneLevelCritical) && pumpRunning == 0) - InvariantResult [Line: 891]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (0 == systemActive || !(1 <= methaneLevelCritical))) && (!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0))) && (0 == systemActive || !(methaneLevelCritical == 0)) - InvariantResult [Line: 476]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= methaneLevelCritical) && systemActive == 1) || ((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && systemActive == 1) - InvariantResult [Line: 397]: Loop Invariant Derived loop invariant: (((((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) && (((\result == 0 && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (0 == systemActive || !(methaneLevelCritical == 0))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel)) && (((0 == systemActive || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || ((\result == 0 && 1 <= tmp) && pumpRunning == 0)) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 328]: Loop Invariant Derived loop invariant: (((((((((!(2 <= \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)) || (1 <= tmp && pumpRunning == 0))) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || (((pumpRunning == \old(pumpRunning) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel)) && ((((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0))) && ((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0))) && ((0 == systemActive || !(1 <= methaneLevelCritical)) || pumpRunning == \old(pumpRunning)) - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 901]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: ((((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 487]: Loop Invariant Derived loop invariant: ((((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: (((0 == systemActive || ((((!(0 == tmp) && pumpRunning == \old(pumpRunning)) && tmp___0 == 0) && \result == 0) && pumpRunning == 0)) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) && ((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || (((!(0 == tmp) && pumpRunning == \old(pumpRunning)) && tmp___0 == 0) && \result == 0)) RESULT: Ultimate proved your program to be correct! [2021-12-16 00:59:20,689 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE