./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 00:59:24,089 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 00:59:24,098 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 00:59:24,140 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 00:59:24,140 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 00:59:24,143 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 00:59:24,144 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 00:59:24,146 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 00:59:24,148 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 00:59:24,151 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 00:59:24,151 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 00:59:24,153 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 00:59:24,153 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 00:59:24,155 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 00:59:24,156 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 00:59:24,161 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 00:59:24,162 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 00:59:24,162 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 00:59:24,164 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 00:59:24,168 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 00:59:24,169 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 00:59:24,170 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 00:59:24,171 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 00:59:24,172 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 00:59:24,178 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 00:59:24,178 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 00:59:24,178 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 00:59:24,180 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 00:59:24,180 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 00:59:24,180 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 00:59:24,181 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 00:59:24,181 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 00:59:24,182 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 00:59:24,183 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 00:59:24,184 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 00:59:24,184 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 00:59:24,185 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 00:59:24,185 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 00:59:24,186 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 00:59:24,187 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 00:59:24,187 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 00:59:24,188 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-16 00:59:24,213 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 00:59:24,214 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 00:59:24,214 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 00:59:24,214 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 00:59:24,215 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-16 00:59:24,215 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-16 00:59:24,216 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 00:59:24,216 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 00:59:24,216 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 00:59:24,217 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 00:59:24,217 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 00:59:24,217 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 00:59:24,217 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 00:59:24,218 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 00:59:24,218 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-16 00:59:24,218 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-16 00:59:24,218 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-16 00:59:24,218 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 00:59:24,218 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 00:59:24,218 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 00:59:24,219 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-16 00:59:24,219 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 00:59:24,219 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 00:59:24,219 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-16 00:59:24,219 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:59:24,219 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 00:59:24,220 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-16 00:59:24,220 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-16 00:59:24,220 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 00:59:24,220 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-16 00:59:24,220 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-16 00:59:24,220 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-16 00:59:24,221 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-16 00:59:24,221 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 00:59:24,221 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf [2021-12-16 00:59:24,388 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 00:59:24,404 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 00:59:24,406 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 00:59:24,407 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 00:59:24,407 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 00:59:24,408 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2021-12-16 00:59:24,453 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/344179aac/067916d25939487b82e01641a0edb4c1/FLAGe958665ca [2021-12-16 00:59:24,811 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 00:59:24,814 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2021-12-16 00:59:24,828 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/344179aac/067916d25939487b82e01641a0edb4c1/FLAGe958665ca [2021-12-16 00:59:24,837 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/344179aac/067916d25939487b82e01641a0edb4c1 [2021-12-16 00:59:24,839 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 00:59:24,840 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 00:59:24,841 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 00:59:24,841 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 00:59:24,843 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 00:59:24,843 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:59:24" (1/1) ... [2021-12-16 00:59:24,844 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6e984f53 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:24, skipping insertion in model container [2021-12-16 00:59:24,844 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 12:59:24" (1/1) ... [2021-12-16 00:59:24,848 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 00:59:24,867 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 00:59:25,005 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2021-12-16 00:59:25,102 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:59:25,117 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 00:59:25,127 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2021-12-16 00:59:25,168 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 00:59:25,188 INFO L208 MainTranslator]: Completed translation [2021-12-16 00:59:25,188 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:25 WrapperNode [2021-12-16 00:59:25,189 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 00:59:25,189 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 00:59:25,190 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 00:59:25,190 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 00:59:25,195 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:25" (1/1) ... [2021-12-16 00:59:25,205 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:25" (1/1) ... [2021-12-16 00:59:25,224 INFO L137 Inliner]: procedures = 59, calls = 163, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 281 [2021-12-16 00:59:25,224 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 00:59:25,225 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 00:59:25,225 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 00:59:25,225 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 00:59:25,231 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:25" (1/1) ... [2021-12-16 00:59:25,231 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:25" (1/1) ... [2021-12-16 00:59:25,233 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:25" (1/1) ... [2021-12-16 00:59:25,234 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:25" (1/1) ... [2021-12-16 00:59:25,238 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:25" (1/1) ... [2021-12-16 00:59:25,241 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:25" (1/1) ... [2021-12-16 00:59:25,243 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:25" (1/1) ... [2021-12-16 00:59:25,247 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 00:59:25,248 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 00:59:25,248 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 00:59:25,248 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 00:59:25,249 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:25" (1/1) ... [2021-12-16 00:59:25,265 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-16 00:59:25,272 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:25,281 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-16 00:59:25,306 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-16 00:59:25,324 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 00:59:25,324 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-16 00:59:25,325 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-16 00:59:25,325 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-16 00:59:25,325 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-16 00:59:25,325 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-16 00:59:25,325 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-16 00:59:25,325 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-16 00:59:25,325 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-16 00:59:25,326 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:59:25,326 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:59:25,326 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-16 00:59:25,326 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-16 00:59:25,326 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-16 00:59:25,326 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-16 00:59:25,326 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-16 00:59:25,327 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-16 00:59:25,327 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-16 00:59:25,327 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-16 00:59:25,327 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 00:59:25,327 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-16 00:59:25,327 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-16 00:59:25,327 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 00:59:25,327 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 00:59:25,443 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 00:59:25,445 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 00:59:25,712 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 00:59:25,718 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 00:59:25,718 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-16 00:59:25,719 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:25 BoogieIcfgContainer [2021-12-16 00:59:25,720 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 00:59:25,721 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-16 00:59:25,721 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-16 00:59:25,724 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-16 00:59:25,741 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.12 12:59:24" (1/3) ... [2021-12-16 00:59:25,741 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@633ebc0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:59:25, skipping insertion in model container [2021-12-16 00:59:25,742 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 12:59:25" (2/3) ... [2021-12-16 00:59:25,742 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@633ebc0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.12 12:59:25, skipping insertion in model container [2021-12-16 00:59:25,742 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:25" (3/3) ... [2021-12-16 00:59:25,743 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product63.cil.c [2021-12-16 00:59:25,746 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-16 00:59:25,746 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-16 00:59:25,785 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-16 00:59:25,791 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-16 00:59:25,791 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-16 00:59:25,818 INFO L276 IsEmpty]: Start isEmpty. Operand has 114 states, 83 states have (on average 1.3734939759036144) internal successors, (114), 94 states have internal predecessors, (114), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2021-12-16 00:59:25,824 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-16 00:59:25,825 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:25,825 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:25,826 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:25,830 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:25,830 INFO L85 PathProgramCache]: Analyzing trace with hash -1947167556, now seen corresponding path program 1 times [2021-12-16 00:59:25,836 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:25,836 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2102589053] [2021-12-16 00:59:25,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:25,837 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:25,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-16 00:59:26,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,046 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:26,047 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:26,047 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2102589053] [2021-12-16 00:59:26,048 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2102589053] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:26,048 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:26,048 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-16 00:59:26,049 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [625751439] [2021-12-16 00:59:26,050 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:26,052 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-16 00:59:26,053 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:26,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-16 00:59:26,073 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:59:26,075 INFO L87 Difference]: Start difference. First operand has 114 states, 83 states have (on average 1.3734939759036144) internal successors, (114), 94 states have internal predecessors, (114), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:26,104 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:26,104 INFO L93 Difference]: Finished difference Result 219 states and 298 transitions. [2021-12-16 00:59:26,105 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-16 00:59:26,106 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-16 00:59:26,106 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:26,112 INFO L225 Difference]: With dead ends: 219 [2021-12-16 00:59:26,112 INFO L226 Difference]: Without dead ends: 105 [2021-12-16 00:59:26,118 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-16 00:59:26,122 INFO L933 BasicCegarLoop]: 146 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:26,123 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:26,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2021-12-16 00:59:26,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 105. [2021-12-16 00:59:26,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 76 states have (on average 1.3157894736842106) internal successors, (100), 86 states have internal predecessors, (100), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-12-16 00:59:26,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 137 transitions. [2021-12-16 00:59:26,154 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 137 transitions. Word has length 25 [2021-12-16 00:59:26,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:26,155 INFO L470 AbstractCegarLoop]: Abstraction has 105 states and 137 transitions. [2021-12-16 00:59:26,155 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:26,155 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 137 transitions. [2021-12-16 00:59:26,157 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-16 00:59:26,157 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:26,157 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:26,157 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-16 00:59:26,158 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:26,158 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:26,158 INFO L85 PathProgramCache]: Analyzing trace with hash -1638616570, now seen corresponding path program 1 times [2021-12-16 00:59:26,158 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:26,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [620645840] [2021-12-16 00:59:26,159 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:26,159 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:26,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-16 00:59:26,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,223 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:26,223 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:26,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [620645840] [2021-12-16 00:59:26,224 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [620645840] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:26,224 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:26,224 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:59:26,224 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1894395016] [2021-12-16 00:59:26,224 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:26,225 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:59:26,225 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:26,226 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:59:26,226 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:26,226 INFO L87 Difference]: Start difference. First operand 105 states and 137 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:26,246 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:26,248 INFO L93 Difference]: Finished difference Result 171 states and 223 transitions. [2021-12-16 00:59:26,263 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:59:26,263 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-16 00:59:26,264 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:26,265 INFO L225 Difference]: With dead ends: 171 [2021-12-16 00:59:26,265 INFO L226 Difference]: Without dead ends: 96 [2021-12-16 00:59:26,265 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:26,266 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 16 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 227 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:26,267 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 227 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:26,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2021-12-16 00:59:26,273 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2021-12-16 00:59:26,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 70 states have (on average 1.3285714285714285) internal successors, (93), 80 states have internal predecessors, (93), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-16 00:59:26,275 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 125 transitions. [2021-12-16 00:59:26,275 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 125 transitions. Word has length 26 [2021-12-16 00:59:26,275 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:26,278 INFO L470 AbstractCegarLoop]: Abstraction has 96 states and 125 transitions. [2021-12-16 00:59:26,278 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:26,279 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 125 transitions. [2021-12-16 00:59:26,279 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-16 00:59:26,280 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:26,280 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:26,280 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-16 00:59:26,280 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:26,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:26,281 INFO L85 PathProgramCache]: Analyzing trace with hash 1033007084, now seen corresponding path program 1 times [2021-12-16 00:59:26,281 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:26,282 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2135375524] [2021-12-16 00:59:26,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:26,282 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:26,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:26,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,318 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:26,318 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:26,318 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2135375524] [2021-12-16 00:59:26,318 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2135375524] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:26,318 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:26,318 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 00:59:26,319 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1417381472] [2021-12-16 00:59:26,319 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:26,319 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-16 00:59:26,319 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:26,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 00:59:26,320 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:26,320 INFO L87 Difference]: Start difference. First operand 96 states and 125 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:26,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:26,369 INFO L93 Difference]: Finished difference Result 271 states and 359 transitions. [2021-12-16 00:59:26,369 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 00:59:26,369 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2021-12-16 00:59:26,370 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:26,373 INFO L225 Difference]: With dead ends: 271 [2021-12-16 00:59:26,373 INFO L226 Difference]: Without dead ends: 183 [2021-12-16 00:59:26,374 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 00:59:26,375 INFO L933 BasicCegarLoop]: 158 mSDtfsCounter, 104 mSDsluCounter, 114 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 272 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:26,376 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [104 Valid, 272 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-16 00:59:26,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2021-12-16 00:59:26,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 180. [2021-12-16 00:59:26,395 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 180 states, 129 states have (on average 1.3488372093023255) internal successors, (174), 148 states have internal predecessors, (174), 32 states have call successors, (32), 18 states have call predecessors, (32), 18 states have return successors, (32), 21 states have call predecessors, (32), 32 states have call successors, (32) [2021-12-16 00:59:26,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 238 transitions. [2021-12-16 00:59:26,397 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 238 transitions. Word has length 30 [2021-12-16 00:59:26,397 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:26,397 INFO L470 AbstractCegarLoop]: Abstraction has 180 states and 238 transitions. [2021-12-16 00:59:26,397 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:26,397 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 238 transitions. [2021-12-16 00:59:26,399 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-12-16 00:59:26,399 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:26,399 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:26,399 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-16 00:59:26,400 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:26,400 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:26,400 INFO L85 PathProgramCache]: Analyzing trace with hash -1394669962, now seen corresponding path program 1 times [2021-12-16 00:59:26,401 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:26,401 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1558736428] [2021-12-16 00:59:26,401 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:26,401 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:26,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:26,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,453 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:26,454 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:26,454 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1558736428] [2021-12-16 00:59:26,454 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1558736428] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:26,454 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:26,454 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:26,454 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2043455406] [2021-12-16 00:59:26,455 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:26,456 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:26,456 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:26,456 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:26,456 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:26,457 INFO L87 Difference]: Start difference. First operand 180 states and 238 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:26,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:26,551 INFO L93 Difference]: Finished difference Result 522 states and 699 transitions. [2021-12-16 00:59:26,552 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:59:26,552 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2021-12-16 00:59:26,552 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:26,555 INFO L225 Difference]: With dead ends: 522 [2021-12-16 00:59:26,555 INFO L226 Difference]: Without dead ends: 350 [2021-12-16 00:59:26,556 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-16 00:59:26,557 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 93 mSDsluCounter, 485 mSDsCounter, 0 mSdLazyCounter, 58 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 623 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 58 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:26,557 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [96 Valid, 623 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 58 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:26,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 350 states. [2021-12-16 00:59:26,581 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 350 to 344. [2021-12-16 00:59:26,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 344 states, 243 states have (on average 1.337448559670782) internal successors, (325), 280 states have internal predecessors, (325), 64 states have call successors, (64), 36 states have call predecessors, (64), 36 states have return successors, (66), 42 states have call predecessors, (66), 64 states have call successors, (66) [2021-12-16 00:59:26,584 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 455 transitions. [2021-12-16 00:59:26,584 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 455 transitions. Word has length 34 [2021-12-16 00:59:26,584 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:26,585 INFO L470 AbstractCegarLoop]: Abstraction has 344 states and 455 transitions. [2021-12-16 00:59:26,585 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-16 00:59:26,585 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 455 transitions. [2021-12-16 00:59:26,586 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-16 00:59:26,587 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:26,587 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:26,587 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-16 00:59:26,587 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:26,587 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:26,588 INFO L85 PathProgramCache]: Analyzing trace with hash -256503566, now seen corresponding path program 1 times [2021-12-16 00:59:26,588 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:26,588 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [916925302] [2021-12-16 00:59:26,588 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:26,588 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:26,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:26,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 00:59:26,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,645 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:26,645 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:26,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [916925302] [2021-12-16 00:59:26,645 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [916925302] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:26,646 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:26,646 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:26,646 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [406981894] [2021-12-16 00:59:26,647 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:26,651 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:26,651 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:26,651 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:26,652 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:26,652 INFO L87 Difference]: Start difference. First operand 344 states and 455 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 00:59:26,885 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:26,885 INFO L93 Difference]: Finished difference Result 892 states and 1200 transitions. [2021-12-16 00:59:26,885 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:59:26,886 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2021-12-16 00:59:26,886 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:26,889 INFO L225 Difference]: With dead ends: 892 [2021-12-16 00:59:26,889 INFO L226 Difference]: Without dead ends: 556 [2021-12-16 00:59:26,891 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-16 00:59:26,892 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 147 mSDsluCounter, 162 mSDsCounter, 0 mSdLazyCounter, 267 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 273 SdHoareTripleChecker+Invalid, 327 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 267 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:26,892 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [157 Valid, 273 Invalid, 327 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 267 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:26,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 556 states. [2021-12-16 00:59:26,919 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 556 to 542. [2021-12-16 00:59:26,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 542 states, 389 states have (on average 1.2776349614395888) internal successors, (497), 426 states have internal predecessors, (497), 84 states have call successors, (84), 68 states have call predecessors, (84), 68 states have return successors, (112), 74 states have call predecessors, (112), 84 states have call successors, (112) [2021-12-16 00:59:26,923 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 542 states to 542 states and 693 transitions. [2021-12-16 00:59:26,923 INFO L78 Accepts]: Start accepts. Automaton has 542 states and 693 transitions. Word has length 38 [2021-12-16 00:59:26,923 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:26,923 INFO L470 AbstractCegarLoop]: Abstraction has 542 states and 693 transitions. [2021-12-16 00:59:26,924 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-16 00:59:26,924 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 693 transitions. [2021-12-16 00:59:26,925 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-16 00:59:26,925 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:26,926 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:26,926 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-16 00:59:26,926 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:26,926 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:26,927 INFO L85 PathProgramCache]: Analyzing trace with hash -843319069, now seen corresponding path program 1 times [2021-12-16 00:59:26,927 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:26,927 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1974077448] [2021-12-16 00:59:26,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:26,927 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:26,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:26,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:26,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:26,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:26,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:27,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:27,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-16 00:59:27,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,008 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:27,008 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:27,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1974077448] [2021-12-16 00:59:27,008 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1974077448] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:27,008 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:27,008 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 00:59:27,009 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [154165626] [2021-12-16 00:59:27,009 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:27,009 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-16 00:59:27,009 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:27,010 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 00:59:27,010 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 00:59:27,010 INFO L87 Difference]: Start difference. First operand 542 states and 693 transitions. Second operand has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 00:59:27,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:27,309 INFO L93 Difference]: Finished difference Result 1208 states and 1589 transitions. [2021-12-16 00:59:27,310 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 00:59:27,310 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2021-12-16 00:59:27,310 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:27,313 INFO L225 Difference]: With dead ends: 1208 [2021-12-16 00:59:27,313 INFO L226 Difference]: Without dead ends: 674 [2021-12-16 00:59:27,315 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:59:27,316 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 159 mSDsluCounter, 183 mSDsCounter, 0 mSdLazyCounter, 325 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 160 SdHoareTripleChecker+Valid, 285 SdHoareTripleChecker+Invalid, 397 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 325 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:27,316 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [160 Valid, 285 Invalid, 397 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 325 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:27,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 674 states. [2021-12-16 00:59:27,345 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 674 to 652. [2021-12-16 00:59:27,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 652 states, 471 states have (on average 1.246284501061571) internal successors, (587), 508 states have internal predecessors, (587), 92 states have call successors, (92), 68 states have call predecessors, (92), 88 states have return successors, (140), 98 states have call predecessors, (140), 92 states have call successors, (140) [2021-12-16 00:59:27,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 652 states to 652 states and 819 transitions. [2021-12-16 00:59:27,349 INFO L78 Accepts]: Start accepts. Automaton has 652 states and 819 transitions. Word has length 65 [2021-12-16 00:59:27,349 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:27,350 INFO L470 AbstractCegarLoop]: Abstraction has 652 states and 819 transitions. [2021-12-16 00:59:27,350 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 00:59:27,350 INFO L276 IsEmpty]: Start isEmpty. Operand 652 states and 819 transitions. [2021-12-16 00:59:27,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-16 00:59:27,352 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:27,352 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:27,352 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-16 00:59:27,352 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:27,353 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:27,353 INFO L85 PathProgramCache]: Analyzing trace with hash -915705627, now seen corresponding path program 1 times [2021-12-16 00:59:27,353 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:27,353 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [675382335] [2021-12-16 00:59:27,353 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:27,354 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:27,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:27,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:27,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:27,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:27,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:27,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-16 00:59:27,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,411 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:27,411 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:27,411 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [675382335] [2021-12-16 00:59:27,411 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [675382335] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:27,412 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:27,412 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:27,412 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [978457039] [2021-12-16 00:59:27,412 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:27,412 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:27,412 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:27,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:27,413 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:27,413 INFO L87 Difference]: Start difference. First operand 652 states and 819 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 00:59:27,641 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:27,641 INFO L93 Difference]: Finished difference Result 1330 states and 1723 transitions. [2021-12-16 00:59:27,641 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 00:59:27,642 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2021-12-16 00:59:27,642 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:27,644 INFO L225 Difference]: With dead ends: 1330 [2021-12-16 00:59:27,644 INFO L226 Difference]: Without dead ends: 686 [2021-12-16 00:59:27,646 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-16 00:59:27,647 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 160 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 243 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 242 SdHoareTripleChecker+Invalid, 308 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 243 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:27,647 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [161 Valid, 242 Invalid, 308 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 243 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-16 00:59:27,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 686 states. [2021-12-16 00:59:27,667 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 686 to 660. [2021-12-16 00:59:27,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 660 states, 479 states have (on average 1.2421711899791232) internal successors, (595), 516 states have internal predecessors, (595), 92 states have call successors, (92), 68 states have call predecessors, (92), 88 states have return successors, (140), 98 states have call predecessors, (140), 92 states have call successors, (140) [2021-12-16 00:59:27,671 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 660 states to 660 states and 827 transitions. [2021-12-16 00:59:27,671 INFO L78 Accepts]: Start accepts. Automaton has 660 states and 827 transitions. Word has length 65 [2021-12-16 00:59:27,671 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:27,671 INFO L470 AbstractCegarLoop]: Abstraction has 660 states and 827 transitions. [2021-12-16 00:59:27,672 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-16 00:59:27,672 INFO L276 IsEmpty]: Start isEmpty. Operand 660 states and 827 transitions. [2021-12-16 00:59:27,673 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-16 00:59:27,673 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:27,673 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:27,673 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-16 00:59:27,673 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:27,673 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:27,674 INFO L85 PathProgramCache]: Analyzing trace with hash -1759711129, now seen corresponding path program 1 times [2021-12-16 00:59:27,674 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:27,674 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [41099729] [2021-12-16 00:59:27,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:27,674 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:27,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-16 00:59:27,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:27,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:27,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:27,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:27,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-16 00:59:27,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:27,727 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-16 00:59:27,727 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:27,727 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [41099729] [2021-12-16 00:59:27,728 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [41099729] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:27,728 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:27,728 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 00:59:27,728 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1058796682] [2021-12-16 00:59:27,728 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:27,728 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-16 00:59:27,729 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:27,729 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 00:59:27,729 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 00:59:27,729 INFO L87 Difference]: Start difference. First operand 660 states and 827 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 4 states have internal predecessors, (50), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 4 states have call successors, (6) [2021-12-16 00:59:28,065 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:28,066 INFO L93 Difference]: Finished difference Result 1838 states and 2399 transitions. [2021-12-16 00:59:28,066 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-16 00:59:28,066 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 4 states have internal predecessors, (50), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 4 states have call successors, (6) Word has length 65 [2021-12-16 00:59:28,066 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:28,071 INFO L225 Difference]: With dead ends: 1838 [2021-12-16 00:59:28,071 INFO L226 Difference]: Without dead ends: 1186 [2021-12-16 00:59:28,072 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 17 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-16 00:59:28,073 INFO L933 BasicCegarLoop]: 154 mSDtfsCounter, 374 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 312 mSolverCounterSat, 164 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 377 SdHoareTripleChecker+Valid, 301 SdHoareTripleChecker+Invalid, 476 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 164 IncrementalHoareTripleChecker+Valid, 312 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:28,073 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [377 Valid, 301 Invalid, 476 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [164 Valid, 312 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-16 00:59:28,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1186 states. [2021-12-16 00:59:28,107 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1186 to 1174. [2021-12-16 00:59:28,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1174 states, 857 states have (on average 1.2147024504084014) internal successors, (1041), 912 states have internal predecessors, (1041), 162 states have call successors, (162), 142 states have call predecessors, (162), 154 states have return successors, (276), 164 states have call predecessors, (276), 162 states have call successors, (276) [2021-12-16 00:59:28,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1174 states to 1174 states and 1479 transitions. [2021-12-16 00:59:28,112 INFO L78 Accepts]: Start accepts. Automaton has 1174 states and 1479 transitions. Word has length 65 [2021-12-16 00:59:28,113 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:28,113 INFO L470 AbstractCegarLoop]: Abstraction has 1174 states and 1479 transitions. [2021-12-16 00:59:28,113 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 4 states have internal predecessors, (50), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 4 states have call successors, (6) [2021-12-16 00:59:28,113 INFO L276 IsEmpty]: Start isEmpty. Operand 1174 states and 1479 transitions. [2021-12-16 00:59:28,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-16 00:59:28,114 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:28,115 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:28,115 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-16 00:59:28,115 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:28,115 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:28,116 INFO L85 PathProgramCache]: Analyzing trace with hash -38227251, now seen corresponding path program 1 times [2021-12-16 00:59:28,116 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:28,116 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1765359630] [2021-12-16 00:59:28,116 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:28,116 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:28,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:28,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:28,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:28,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-16 00:59:28,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:28,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-16 00:59:28,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:28,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:28,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:28,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:28,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:28,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:28,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:28,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2021-12-16 00:59:28,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:28,303 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-16 00:59:28,303 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:28,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1765359630] [2021-12-16 00:59:28,303 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1765359630] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:28,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1783043313] [2021-12-16 00:59:28,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:28,304 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:28,304 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:28,305 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:28,329 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-16 00:59:28,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:28,405 INFO L263 TraceCheckSpWp]: Trace formula consists of 401 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-16 00:59:28,409 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:28,666 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 00:59:28,666 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:59:28,666 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1783043313] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:28,666 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:59:28,666 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2021-12-16 00:59:28,667 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1600581868] [2021-12-16 00:59:28,667 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:28,667 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 00:59:28,667 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:28,668 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 00:59:28,668 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=364, Unknown=0, NotChecked=0, Total=420 [2021-12-16 00:59:28,668 INFO L87 Difference]: Start difference. First operand 1174 states and 1479 transitions. Second operand has 8 states, 8 states have (on average 6.75) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2021-12-16 00:59:28,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:28,808 INFO L93 Difference]: Finished difference Result 2292 states and 2902 transitions. [2021-12-16 00:59:28,808 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:59:28,808 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.75) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) Word has length 69 [2021-12-16 00:59:28,809 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:28,813 INFO L225 Difference]: With dead ends: 2292 [2021-12-16 00:59:28,813 INFO L226 Difference]: Without dead ends: 1126 [2021-12-16 00:59:28,815 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 72 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=56, Invalid=364, Unknown=0, NotChecked=0, Total=420 [2021-12-16 00:59:28,816 INFO L933 BasicCegarLoop]: 228 mSDtfsCounter, 85 mSDsluCounter, 830 mSDsCounter, 0 mSdLazyCounter, 215 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 1058 SdHoareTripleChecker+Invalid, 218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 215 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:28,816 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [89 Valid, 1058 Invalid, 218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 215 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:28,817 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1126 states. [2021-12-16 00:59:28,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1126 to 1122. [2021-12-16 00:59:28,848 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1122 states, 817 states have (on average 1.200734394124847) internal successors, (981), 870 states have internal predecessors, (981), 158 states have call successors, (158), 138 states have call predecessors, (158), 146 states have return successors, (242), 156 states have call predecessors, (242), 158 states have call successors, (242) [2021-12-16 00:59:28,851 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1122 states to 1122 states and 1381 transitions. [2021-12-16 00:59:28,852 INFO L78 Accepts]: Start accepts. Automaton has 1122 states and 1381 transitions. Word has length 69 [2021-12-16 00:59:28,852 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:28,852 INFO L470 AbstractCegarLoop]: Abstraction has 1122 states and 1381 transitions. [2021-12-16 00:59:28,852 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.75) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2021-12-16 00:59:28,853 INFO L276 IsEmpty]: Start isEmpty. Operand 1122 states and 1381 transitions. [2021-12-16 00:59:28,854 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2021-12-16 00:59:28,855 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:28,855 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:28,882 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-12-16 00:59:29,069 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:29,069 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:29,070 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:29,070 INFO L85 PathProgramCache]: Analyzing trace with hash -422564999, now seen corresponding path program 1 times [2021-12-16 00:59:29,070 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:29,070 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [560584451] [2021-12-16 00:59:29,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:29,070 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:29,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:29,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,098 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-16 00:59:29,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:59:29,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:29,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:29,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:29,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-16 00:59:29,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2021-12-16 00:59:29,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2021-12-16 00:59:29,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,140 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-16 00:59:29,140 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:29,141 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [560584451] [2021-12-16 00:59:29,141 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [560584451] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:29,141 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 00:59:29,141 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-16 00:59:29,141 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1233483749] [2021-12-16 00:59:29,141 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:29,142 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 00:59:29,142 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:29,142 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 00:59:29,143 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-16 00:59:29,143 INFO L87 Difference]: Start difference. First operand 1122 states and 1381 transitions. Second operand has 8 states, 8 states have (on average 9.125) internal successors, (73), 4 states have internal predecessors, (73), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2021-12-16 00:59:29,558 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:29,558 INFO L93 Difference]: Finished difference Result 1455 states and 1799 transitions. [2021-12-16 00:59:29,559 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-16 00:59:29,559 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.125) internal successors, (73), 4 states have internal predecessors, (73), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) Word has length 96 [2021-12-16 00:59:29,559 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:29,562 INFO L225 Difference]: With dead ends: 1455 [2021-12-16 00:59:29,562 INFO L226 Difference]: Without dead ends: 653 [2021-12-16 00:59:29,564 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=86, Invalid=220, Unknown=0, NotChecked=0, Total=306 [2021-12-16 00:59:29,565 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 334 mSDsluCounter, 191 mSDsCounter, 0 mSdLazyCounter, 376 mSolverCounterSat, 149 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 343 SdHoareTripleChecker+Valid, 329 SdHoareTripleChecker+Invalid, 525 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 149 IncrementalHoareTripleChecker+Valid, 376 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:29,565 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [343 Valid, 329 Invalid, 525 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [149 Valid, 376 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-16 00:59:29,566 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 653 states. [2021-12-16 00:59:29,588 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 653 to 633. [2021-12-16 00:59:29,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 633 states, 460 states have (on average 1.1608695652173913) internal successors, (534), 492 states have internal predecessors, (534), 91 states have call successors, (91), 68 states have call predecessors, (91), 81 states have return successors, (151), 92 states have call predecessors, (151), 91 states have call successors, (151) [2021-12-16 00:59:29,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 633 states to 633 states and 776 transitions. [2021-12-16 00:59:29,591 INFO L78 Accepts]: Start accepts. Automaton has 633 states and 776 transitions. Word has length 96 [2021-12-16 00:59:29,591 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:29,592 INFO L470 AbstractCegarLoop]: Abstraction has 633 states and 776 transitions. [2021-12-16 00:59:29,592 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.125) internal successors, (73), 4 states have internal predecessors, (73), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2021-12-16 00:59:29,592 INFO L276 IsEmpty]: Start isEmpty. Operand 633 states and 776 transitions. [2021-12-16 00:59:29,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2021-12-16 00:59:29,593 INFO L506 BasicCegarLoop]: Found error trace [2021-12-16 00:59:29,594 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:29,594 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-16 00:59:29,594 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-16 00:59:29,594 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 00:59:29,594 INFO L85 PathProgramCache]: Analyzing trace with hash -921698978, now seen corresponding path program 1 times [2021-12-16 00:59:29,595 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 00:59:29,595 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1193131336] [2021-12-16 00:59:29,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:29,595 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 00:59:29,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-16 00:59:29,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-16 00:59:29,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-16 00:59:29,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:29,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-16 00:59:29,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:29,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-16 00:59:29,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-12-16 00:59:29,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-16 00:59:29,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-16 00:59:29,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-16 00:59:29,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-16 00:59:29,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-16 00:59:29,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-16 00:59:29,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,749 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-12-16 00:59:29,749 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 00:59:29,750 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1193131336] [2021-12-16 00:59:29,750 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1193131336] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-16 00:59:29,750 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1779885441] [2021-12-16 00:59:29,750 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 00:59:29,750 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-16 00:59:29,750 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 00:59:29,751 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-16 00:59:29,790 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-16 00:59:29,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 00:59:29,873 INFO L263 TraceCheckSpWp]: Trace formula consists of 536 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-16 00:59:29,875 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 00:59:30,094 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-16 00:59:30,095 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-16 00:59:30,095 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1779885441] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 00:59:30,095 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-16 00:59:30,095 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2021-12-16 00:59:30,095 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [21979109] [2021-12-16 00:59:30,095 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 00:59:30,095 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-16 00:59:30,095 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 00:59:30,096 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 00:59:30,096 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=293, Unknown=0, NotChecked=0, Total=342 [2021-12-16 00:59:30,096 INFO L87 Difference]: Start difference. First operand 633 states and 776 transitions. Second operand has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-16 00:59:30,187 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 00:59:30,187 INFO L93 Difference]: Finished difference Result 1096 states and 1363 transitions. [2021-12-16 00:59:30,203 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-16 00:59:30,203 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 123 [2021-12-16 00:59:30,204 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-16 00:59:30,204 INFO L225 Difference]: With dead ends: 1096 [2021-12-16 00:59:30,204 INFO L226 Difference]: Without dead ends: 0 [2021-12-16 00:59:30,206 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 161 GetRequests, 142 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=61, Invalid=359, Unknown=0, NotChecked=0, Total=420 [2021-12-16 00:59:30,206 INFO L933 BasicCegarLoop]: 197 mSDtfsCounter, 73 mSDsluCounter, 991 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 1188 SdHoareTripleChecker+Invalid, 132 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-16 00:59:30,207 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 1188 Invalid, 132 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-16 00:59:30,207 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-16 00:59:30,207 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-16 00:59:30,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 00:59:30,207 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-16 00:59:30,207 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 123 [2021-12-16 00:59:30,207 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-16 00:59:30,207 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-16 00:59:30,208 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-16 00:59:30,208 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-16 00:59:30,208 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-16 00:59:30,209 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-16 00:59:30,239 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-12-16 00:59:30,423 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-16 00:59:30,425 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-16 00:59:33,443 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 521 528) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= ~systemActive~0 1))) (.cse0 (= 0 ~systemActive~0)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse5) (or .cse1 .cse2 .cse5) (or .cse0 .cse4 .cse1 .cse3))) [2021-12-16 00:59:33,444 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 521 528) no Hoare annotation was computed. [2021-12-16 00:59:33,444 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 521 528) no Hoare annotation was computed. [2021-12-16 00:59:33,444 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 411 417) no Hoare annotation was computed. [2021-12-16 00:59:33,444 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 411 417) the Hoare annotation is: true [2021-12-16 00:59:33,444 INFO L854 garLoopResultBuilder]: At program point L459(line 459) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse1))) [2021-12-16 00:59:33,444 INFO L854 garLoopResultBuilder]: At program point L455(line 455) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse1))) [2021-12-16 00:59:33,444 INFO L858 garLoopResultBuilder]: For program point L453(lines 453 461) no Hoare annotation was computed. [2021-12-16 00:59:33,444 INFO L858 garLoopResultBuilder]: For program point L449(lines 449 466) no Hoare annotation was computed. [2021-12-16 00:59:33,444 INFO L854 garLoopResultBuilder]: At program point L309(lines 304 312) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse1))) [2021-12-16 00:59:33,444 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 445 469) the Hoare annotation is: (let ((.cse0 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse0 (= ~pumpRunning~0 0)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-16 00:59:33,444 INFO L854 garLoopResultBuilder]: At program point L464(line 464) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-16 00:59:33,444 INFO L858 garLoopResultBuilder]: For program point L464-1(lines 445 469) no Hoare annotation was computed. [2021-12-16 00:59:33,444 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 445 469) no Hoare annotation was computed. [2021-12-16 00:59:33,444 INFO L854 garLoopResultBuilder]: At program point L619(lines 604 622) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse1))) [2021-12-16 00:59:33,445 INFO L858 garLoopResultBuilder]: For program point L613(lines 613 617) no Hoare annotation was computed. [2021-12-16 00:59:33,445 INFO L858 garLoopResultBuilder]: For program point L613-2(lines 613 617) no Hoare annotation was computed. [2021-12-16 00:59:33,445 INFO L858 garLoopResultBuilder]: For program point L241-1(lines 237 248) no Hoare annotation was computed. [2021-12-16 00:59:33,445 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 237 248) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse2 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~systemActive~0 0))) (.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse4 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse5 .cse0 .cse6 .cse3) (or .cse5 .cse6 .cse4))) [2021-12-16 00:59:33,445 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 237 248) no Hoare annotation was computed. [2021-12-16 00:59:33,445 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 249 257) the Hoare annotation is: true [2021-12-16 00:59:33,445 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 249 257) no Hoare annotation was computed. [2021-12-16 00:59:33,445 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 249 257) no Hoare annotation was computed. [2021-12-16 00:59:33,445 INFO L854 garLoopResultBuilder]: At program point L481(line 481) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~systemActive~0 0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse1) .cse2) (or .cse0 .cse3 .cse2) (or .cse3 .cse4 .cse2) (or .cse0 .cse3 .cse5) (or .cse3 .cse4 .cse5) (or .cse1 .cse4 .cse2))) [2021-12-16 00:59:33,445 INFO L854 garLoopResultBuilder]: At program point L477(line 477) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~systemActive~0 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2) (or .cse1 .cse3 .cse2) (or .cse0 .cse1 .cse4) (or .cse1 .cse3 .cse4) (or .cse0 .cse5 .cse2) (or .cse5 .cse3 .cse2))) [2021-12-16 00:59:33,445 INFO L858 garLoopResultBuilder]: For program point L477-1(line 477) no Hoare annotation was computed. [2021-12-16 00:59:33,445 INFO L858 garLoopResultBuilder]: For program point L188(lines 188 198) no Hoare annotation was computed. [2021-12-16 00:59:33,445 INFO L858 garLoopResultBuilder]: For program point L217(lines 217 221) no Hoare annotation was computed. [2021-12-16 00:59:33,445 INFO L858 garLoopResultBuilder]: For program point L184(lines 184 201) no Hoare annotation was computed. [2021-12-16 00:59:33,445 INFO L854 garLoopResultBuilder]: At program point L217-2(lines 213 224) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~systemActive~0 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2) (or .cse1 .cse3 .cse2) (or .cse0 .cse1 .cse4) (or .cse1 .cse3 .cse4) (or .cse0 .cse5 .cse2) (or .cse5 .cse3 .cse2))) [2021-12-16 00:59:33,445 INFO L854 garLoopResultBuilder]: At program point L184-1(lines 176 204) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse3 (not (= ~systemActive~0 1))) (.cse0 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse3 .cse5) (or (and .cse6 (<= 2 ~waterLevel~0)) (and .cse6 .cse7) (and .cse6 .cse5) .cse2 .cse3) (or .cse1 .cse2 (and .cse6 .cse0 .cse5) .cse8) (or .cse4 .cse0 .cse1 .cse3) (or (and .cse0 .cse7) .cse4 .cse1 .cse8))) [2021-12-16 00:59:33,446 INFO L854 garLoopResultBuilder]: At program point L490(line 490) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse2 (not (= ~systemActive~0 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4) (or .cse1 .cse5 .cse2) (or .cse3 .cse5 .cse4))) [2021-12-16 00:59:33,446 INFO L854 garLoopResultBuilder]: At program point L490-1(lines 471 495) the Hoare annotation is: (let ((.cse0 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse1 (<= 2 ~waterLevel~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= ~systemActive~0 0))) (.cse2 (and .cse0 (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~systemActive~0 1)))) (and (or (and .cse0 .cse1) .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse5 .cse7) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse4 .cse5 .cse7) (or .cse6 .cse3 .cse8) (or .cse3 .cse4 .cse8) (or .cse2 .cse6 .cse3 .cse5)))) [2021-12-16 00:59:33,446 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 387 410) no Hoare annotation was computed. [2021-12-16 00:59:33,446 INFO L858 garLoopResultBuilder]: For program point L391-1(lines 390 409) no Hoare annotation was computed. [2021-12-16 00:59:33,446 INFO L858 garLoopResultBuilder]: For program point L160(line 160) no Hoare annotation was computed. [2021-12-16 00:59:33,446 INFO L858 garLoopResultBuilder]: For program point L189(lines 189 195) no Hoare annotation was computed. [2021-12-16 00:59:33,446 INFO L854 garLoopResultBuilder]: At program point L545(lines 540 548) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse6 (not (= ~systemActive~0 0))) (.cse8 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse7 (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~systemActive~0 1)))) (and (or (and .cse0 .cse1) .cse2 .cse3) (or .cse4 .cse3) (or .cse5 .cse4 .cse6) (or (and .cse0 .cse7 .cse8 .cse1) .cse2 .cse5 .cse6) (or (and .cse8 .cse7) .cse2 .cse5 .cse3))) [2021-12-16 00:59:33,446 INFO L854 garLoopResultBuilder]: At program point L161(lines 156 163) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~systemActive~0 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse3 .cse0 .cse4) (or .cse2 .cse1))) [2021-12-16 00:59:33,446 INFO L858 garLoopResultBuilder]: For program point L479(lines 479 487) no Hoare annotation was computed. [2021-12-16 00:59:33,446 INFO L858 garLoopResultBuilder]: For program point L475(lines 475 492) no Hoare annotation was computed. [2021-12-16 00:59:33,446 INFO L854 garLoopResultBuilder]: At program point L182(line 182) the Hoare annotation is: (let ((.cse10 (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|)) (.cse5 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse0 (and .cse10 .cse5 .cse9)) (.cse3 (not (= ~systemActive~0 0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse7 (and .cse5 .cse10)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse3) (or (and .cse5 .cse6) .cse7 .cse1 .cse2 .cse8) (or .cse4 .cse8 .cse9) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse2 .cse8 .cse9) (or .cse7 .cse4 .cse1 .cse8)))) [2021-12-16 00:59:33,446 INFO L858 garLoopResultBuilder]: For program point L182-1(line 182) no Hoare annotation was computed. [2021-12-16 00:59:33,446 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 387 410) the Hoare annotation is: (let ((.cse8 (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|)) (.cse7 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse0 (and .cse8 .cse7 (= ~pumpRunning~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~systemActive~0 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and .cse7 .cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse6 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse3) (or .cse4 .cse5 .cse6) (or .cse2 .cse5 .cse6)))) [2021-12-16 00:59:33,446 INFO L858 garLoopResultBuilder]: For program point L398-1(lines 398 404) no Hoare annotation was computed. [2021-12-16 00:59:33,447 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 387 410) no Hoare annotation was computed. [2021-12-16 00:59:33,447 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 160) no Hoare annotation was computed. [2021-12-16 00:59:33,447 INFO L854 garLoopResultBuilder]: At program point L485(line 485) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~systemActive~0 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse0 .cse4) (or .cse0 .cse1 .cse4) (or .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-16 00:59:33,447 INFO L861 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2021-12-16 00:59:33,447 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2021-12-16 00:59:33,447 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2021-12-16 00:59:33,447 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2021-12-16 00:59:33,447 INFO L861 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2021-12-16 00:59:33,447 INFO L861 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2021-12-16 00:59:33,447 INFO L858 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2021-12-16 00:59:33,447 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2021-12-16 00:59:33,447 INFO L858 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2021-12-16 00:59:33,447 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-12-16 00:59:33,447 INFO L861 garLoopResultBuilder]: At program point L126(lines 118 128) the Hoare annotation is: true [2021-12-16 00:59:33,447 INFO L858 garLoopResultBuilder]: For program point L345(lines 345 351) no Hoare annotation was computed. [2021-12-16 00:59:33,447 INFO L858 garLoopResultBuilder]: For program point L345-1(lines 345 351) no Hoare annotation was computed. [2021-12-16 00:59:33,447 INFO L861 garLoopResultBuilder]: At program point L151(lines 132 154) the Hoare annotation is: true [2021-12-16 00:59:33,448 INFO L854 garLoopResultBuilder]: At program point L370(lines 325 372) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0 1)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= ~systemActive~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2) (and .cse0 .cse5 .cse4 .cse3) (and .cse0 .cse5 .cse1 .cse3))) [2021-12-16 00:59:33,448 INFO L854 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0 1)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= ~systemActive~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2) (and .cse0 .cse5 .cse4 .cse3) (and .cse0 .cse5 .cse1 .cse3))) [2021-12-16 00:59:33,448 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-16 00:59:33,448 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-16 00:59:33,448 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-16 00:59:33,448 INFO L854 garLoopResultBuilder]: At program point L635(lines 623 637) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 0)) (.cse2 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2) (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2))) [2021-12-16 00:59:33,448 INFO L858 garLoopResultBuilder]: For program point L627(lines 627 633) no Hoare annotation was computed. [2021-12-16 00:59:33,448 INFO L858 garLoopResultBuilder]: For program point L627-1(lines 627 633) no Hoare annotation was computed. [2021-12-16 00:59:33,448 INFO L854 garLoopResultBuilder]: At program point L173(lines 168 175) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:33,448 INFO L858 garLoopResultBuilder]: For program point L326(lines 325 372) no Hoare annotation was computed. [2021-12-16 00:59:33,448 INFO L858 garLoopResultBuilder]: For program point L355(lines 355 368) no Hoare annotation was computed. [2021-12-16 00:59:33,448 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-16 00:59:33,448 INFO L854 garLoopResultBuilder]: At program point L669(lines 664 672) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:33,448 INFO L854 garLoopResultBuilder]: At program point L347(line 347) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0 1)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= ~systemActive~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2) (and .cse0 .cse5 .cse4 .cse3) (and .cse0 .cse5 .cse1 .cse3))) [2021-12-16 00:59:33,448 INFO L861 garLoopResultBuilder]: At program point L376(lines 315 380) the Hoare annotation is: true [2021-12-16 00:59:33,448 INFO L854 garLoopResultBuilder]: At program point L661(lines 657 663) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:33,448 INFO L858 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2021-12-16 00:59:33,448 INFO L858 garLoopResultBuilder]: For program point L335-1(lines 335 341) no Hoare annotation was computed. [2021-12-16 00:59:33,448 INFO L858 garLoopResultBuilder]: For program point L327(lines 327 331) no Hoare annotation was computed. [2021-12-16 00:59:33,449 INFO L854 garLoopResultBuilder]: At program point L629(line 629) the Hoare annotation is: (let ((.cse1 (<= 2 ~waterLevel~0)) (.cse3 (not (= 0 ~systemActive~0))) (.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse3) (and .cse0 .cse2 .cse5) (and .cse0 .cse4 .cse5))) [2021-12-16 00:59:33,449 INFO L854 garLoopResultBuilder]: At program point L373(lines 324 374) the Hoare annotation is: false [2021-12-16 00:59:33,449 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:33,449 INFO L854 garLoopResultBuilder]: At program point L654(lines 650 656) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-16 00:59:33,449 INFO L858 garLoopResultBuilder]: For program point L142(lines 142 149) no Hoare annotation was computed. [2021-12-16 00:59:33,449 INFO L858 garLoopResultBuilder]: For program point L142-2(lines 142 149) no Hoare annotation was computed. [2021-12-16 00:59:33,449 INFO L858 garLoopResultBuilder]: For program point L361(lines 361 367) no Hoare annotation was computed. [2021-12-16 00:59:33,449 INFO L854 garLoopResultBuilder]: At program point L361-2(lines 355 368) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0 1)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= ~systemActive~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse3 .cse2) (and .cse0 .cse4 .cse3 .cse5) (and .cse0 .cse4 .cse1 .cse5))) [2021-12-16 00:59:33,449 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 419 443) the Hoare annotation is: (let ((.cse0 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse0 (= ~pumpRunning~0 0)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-16 00:59:33,449 INFO L854 garLoopResultBuilder]: At program point L438(line 438) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse1))) [2021-12-16 00:59:33,449 INFO L858 garLoopResultBuilder]: For program point L438-1(lines 419 443) no Hoare annotation was computed. [2021-12-16 00:59:33,449 INFO L858 garLoopResultBuilder]: For program point L294(lines 294 300) no Hoare annotation was computed. [2021-12-16 00:59:33,449 INFO L858 garLoopResultBuilder]: For program point L511(lines 511 517) no Hoare annotation was computed. [2021-12-16 00:59:33,449 INFO L854 garLoopResultBuilder]: At program point L509(line 509) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~systemActive~0 1)))) (and (or (and .cse0 .cse1) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) .cse2))) [2021-12-16 00:59:33,449 INFO L854 garLoopResultBuilder]: At program point L511-2(lines 504 520) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|) .cse0 (= ~pumpRunning~0 0)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2021-12-16 00:59:33,449 INFO L858 garLoopResultBuilder]: For program point L509-1(line 509) no Hoare annotation was computed. [2021-12-16 00:59:33,450 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 419 443) no Hoare annotation was computed. [2021-12-16 00:59:33,450 INFO L854 garLoopResultBuilder]: At program point L600(lines 585 603) the Hoare annotation is: (let ((.cse1 (<= 2 ~waterLevel~0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (.cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse5 (not (= ~systemActive~0 1)))) (and (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse0 .cse1 .cse2) (and .cse3 .cse0 .cse4 .cse2) (not (= ~methaneLevelCritical~0 0)) .cse5)) (or (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) (and .cse3 .cse4 .cse2) (not (= |old(~pumpRunning~0)| 0)) .cse5))) [2021-12-16 00:59:33,450 INFO L854 garLoopResultBuilder]: At program point L501(lines 496 503) the Hoare annotation is: (let ((.cse0 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-16 00:59:33,450 INFO L858 garLoopResultBuilder]: For program point L594(lines 594 598) no Hoare annotation was computed. [2021-12-16 00:59:33,450 INFO L854 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse0 (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~systemActive~0 1)))) (and (or (and .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) (not (= ~methaneLevelCritical~0 0)) .cse2) (or (and .cse0 .cse1) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse2))) [2021-12-16 00:59:33,450 INFO L858 garLoopResultBuilder]: For program point L594-2(lines 594 598) no Hoare annotation was computed. [2021-12-16 00:59:33,450 INFO L854 garLoopResultBuilder]: At program point L299(lines 290 303) the Hoare annotation is: (let ((.cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (= ~systemActive~0 1)))) (and (or (and .cse0 .cse1) (and .cse2 .cse1) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse3) (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse2 .cse4 .cse1) (and .cse4 .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) .cse3)))) [2021-12-16 00:59:33,450 INFO L858 garLoopResultBuilder]: For program point L427(lines 427 435) no Hoare annotation was computed. [2021-12-16 00:59:33,450 INFO L858 garLoopResultBuilder]: For program point L423(lines 423 440) no Hoare annotation was computed. [2021-12-16 00:59:33,450 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 225 236) no Hoare annotation was computed. [2021-12-16 00:59:33,450 INFO L858 garLoopResultBuilder]: For program point L229-1(lines 225 236) no Hoare annotation was computed. [2021-12-16 00:59:33,450 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 225 236) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~systemActive~0 0))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse5 .cse3) (or .cse2 .cse5 .cse4))) [2021-12-16 00:59:33,450 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 529 539) the Hoare annotation is: true [2021-12-16 00:59:33,450 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 529 539) no Hoare annotation was computed. [2021-12-16 00:59:33,450 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 529 539) no Hoare annotation was computed. [2021-12-16 00:59:33,450 INFO L861 garLoopResultBuilder]: At program point L534(line 534) the Hoare annotation is: true [2021-12-16 00:59:33,450 INFO L858 garLoopResultBuilder]: For program point L534-1(line 534) no Hoare annotation was computed. [2021-12-16 00:59:33,458 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 00:59:33,459 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-16 00:59:33,487 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.12 12:59:33 BoogieIcfgContainer [2021-12-16 00:59:33,507 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-16 00:59:33,507 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-16 00:59:33,507 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-16 00:59:33,508 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-16 00:59:33,508 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 12:59:25" (3/4) ... [2021-12-16 00:59:33,510 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-16 00:59:33,528 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-16 00:59:33,528 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-16 00:59:33,528 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-16 00:59:33,528 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-16 00:59:33,528 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-16 00:59:33,529 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-16 00:59:33,529 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-16 00:59:33,529 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-16 00:59:33,529 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-16 00:59:33,529 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-16 00:59:33,541 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-16 00:59:33,542 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-16 00:59:33,542 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-16 00:59:33,543 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-16 00:59:33,543 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-16 00:59:33,543 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:59:33,544 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-16 00:59:33,588 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((!(1 <= methaneLevelCritical) || pumpRunning == \old(pumpRunning)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:59:33,589 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((waterLevel == \old(waterLevel) && 2 <= waterLevel) || (waterLevel == \old(waterLevel) && methAndRunningLastTime == \old(methAndRunningLastTime))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(systemActive == 1)) || pumpRunning == 0)) && ((((pumpRunning == \old(pumpRunning) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || pumpRunning == 0)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((waterLevel == \old(waterLevel) && methAndRunningLastTime == \old(methAndRunningLastTime)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-16 00:59:33,590 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((waterLevel == \old(waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(systemActive == 1)) || pumpRunning == 0)) && (((((tmp == 0 && 2 <= waterLevel) || (tmp == 0 && pumpRunning == \old(pumpRunning))) || (tmp == 0 && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((tmp == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(systemActive == 0))) && (((!(1 <= methaneLevelCritical) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) [2021-12-16 00:59:33,590 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\result == 0 && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) && (!(methaneLevelCritical == 0) || !(systemActive == 1))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((((\result == 0 && methAndRunningLastTime == \old(methAndRunningLastTime)) && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((waterLevel == \old(waterLevel) && methAndRunningLastTime == \old(methAndRunningLastTime)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-16 00:59:33,590 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || ((methaneLevelCritical <= tmp && 2 <= waterLevel) && pumpRunning == 0)) || !(systemActive == 1)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:59:33,591 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:59:33,591 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:59:33,591 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && pumpRunning == 0) || (\result == 1 && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((((\result == 1 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:59:33,591 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(methaneLevelCritical == 0) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && (!(1 <= methaneLevelCritical) || !(systemActive == 1)) [2021-12-16 00:59:33,594 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-16 00:59:33,594 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0) || (((\result == 0 && pumpRunning == \old(pumpRunning)) && tmp___0 == 0) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || ((\result == 0 && tmp___0 == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-16 00:59:33,625 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-16 00:59:33,625 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-16 00:59:33,626 INFO L158 Benchmark]: Toolchain (without parser) took 8786.01ms. Allocated memory was 81.8MB in the beginning and 237.0MB in the end (delta: 155.2MB). Free memory was 46.9MB in the beginning and 128.6MB in the end (delta: -81.7MB). Peak memory consumption was 73.2MB. Max. memory is 16.1GB. [2021-12-16 00:59:33,626 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 81.8MB. Free memory was 53.5MB in the beginning and 53.5MB in the end (delta: 27.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-16 00:59:33,626 INFO L158 Benchmark]: CACSL2BoogieTranslator took 348.04ms. Allocated memory was 81.8MB in the beginning and 111.1MB in the end (delta: 29.4MB). Free memory was 46.7MB in the beginning and 78.7MB in the end (delta: -32.0MB). Peak memory consumption was 9.8MB. Max. memory is 16.1GB. [2021-12-16 00:59:33,627 INFO L158 Benchmark]: Boogie Procedure Inliner took 34.91ms. Allocated memory is still 111.1MB. Free memory was 78.7MB in the beginning and 76.4MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:59:33,627 INFO L158 Benchmark]: Boogie Preprocessor took 22.70ms. Allocated memory is still 111.1MB. Free memory was 76.4MB in the beginning and 74.4MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-16 00:59:33,627 INFO L158 Benchmark]: RCFGBuilder took 471.69ms. Allocated memory is still 111.1MB. Free memory was 74.4MB in the beginning and 83.7MB in the end (delta: -9.3MB). Peak memory consumption was 19.2MB. Max. memory is 16.1GB. [2021-12-16 00:59:33,628 INFO L158 Benchmark]: TraceAbstraction took 7786.24ms. Allocated memory was 111.1MB in the beginning and 237.0MB in the end (delta: 125.8MB). Free memory was 83.0MB in the beginning and 135.9MB in the end (delta: -52.9MB). Peak memory consumption was 111.2MB. Max. memory is 16.1GB. [2021-12-16 00:59:33,628 INFO L158 Benchmark]: Witness Printer took 118.07ms. Allocated memory is still 237.0MB. Free memory was 135.9MB in the beginning and 128.6MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-16 00:59:33,629 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 81.8MB. Free memory was 53.5MB in the beginning and 53.5MB in the end (delta: 27.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 348.04ms. Allocated memory was 81.8MB in the beginning and 111.1MB in the end (delta: 29.4MB). Free memory was 46.7MB in the beginning and 78.7MB in the end (delta: -32.0MB). Peak memory consumption was 9.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 34.91ms. Allocated memory is still 111.1MB. Free memory was 78.7MB in the beginning and 76.4MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 22.70ms. Allocated memory is still 111.1MB. Free memory was 76.4MB in the beginning and 74.4MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 471.69ms. Allocated memory is still 111.1MB. Free memory was 74.4MB in the beginning and 83.7MB in the end (delta: -9.3MB). Peak memory consumption was 19.2MB. Max. memory is 16.1GB. * TraceAbstraction took 7786.24ms. Allocated memory was 111.1MB in the beginning and 237.0MB in the end (delta: 125.8MB). Free memory was 83.0MB in the beginning and 135.9MB in the end (delta: -52.9MB). Peak memory consumption was 111.2MB. Max. memory is 16.1GB. * Witness Printer took 118.07ms. Allocated memory is still 237.0MB. Free memory was 135.9MB in the beginning and 128.6MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 160]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 114 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.7s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1584 SdHoareTripleChecker+Valid, 1.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1545 mSDsluCounter, 4944 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3344 mSDsCounter, 523 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1927 IncrementalHoareTripleChecker+Invalid, 2450 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 523 mSolverCounterUnsat, 1600 mSDtfsCounter, 1927 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 402 GetRequests, 302 SyntacticMatches, 2 SemanticMatches, 98 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 156 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1174occurred in iteration=8, InterpolantAutomatonStates: 82, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 11 MinimizatonAttempts, 107 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 52 LocationsWithAnnotation, 2815 PreInvPairs, 3100 NumberOfFragments, 2004 HoareAnnotationTreeSize, 2815 FomulaSimplifications, 1644 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 52 FomulaSimplificationsInter, 14171 FormulaSimplificationTreeSizeReductionInter, 2.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.3s InterpolantComputationTime, 828 NumberOfCodeBlocks, 828 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 815 ConstructedInterpolants, 0 QuantifiedInterpolants, 1557 SizeOfPredicates, 6 NumberOfNonLiveVariables, 937 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 121/135 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 471]: Loop Invariant Derived loop invariant: (((((((((waterLevel == \old(waterLevel) && 2 <= waterLevel) || (waterLevel == \old(waterLevel) && methAndRunningLastTime == \old(methAndRunningLastTime))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(systemActive == 1)) || pumpRunning == 0)) && ((((pumpRunning == \old(pumpRunning) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || pumpRunning == 0)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((waterLevel == \old(waterLevel) && methAndRunningLastTime == \old(methAndRunningLastTime)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 304]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 604]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 585]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0) || (((\result == 0 && pumpRunning == \old(pumpRunning)) && tmp___0 == 0) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || ((\result == 0 && tmp___0 == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (((((splverifierCounter == 0 && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0) || ((splverifierCounter == 0 && methaneLevelCritical == 0) && systemActive == 1)) || (((splverifierCounter == 0 && systemActive == 0) && methaneLevelCritical == 0) && pumpRunning == 0)) || (((splverifierCounter == 0 && systemActive == 0) && 1 <= methaneLevelCritical) && pumpRunning == 0) - InvariantResult [Line: 213]: Loop Invariant Derived loop invariant: ((((((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((!(1 <= methaneLevelCritical) || pumpRunning == \old(pumpRunning)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: (((splverifierCounter == 0 && systemActive == 0) && methaneLevelCritical == 0) && pumpRunning == 0) || (((splverifierCounter == 0 && systemActive == 0) && 1 <= methaneLevelCritical) && pumpRunning == 0) - InvariantResult [Line: 650]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 156]: Loop Invariant Derived loop invariant: (((!(methaneLevelCritical == 0) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && (!(1 <= methaneLevelCritical) || !(systemActive == 1)) - InvariantResult [Line: 504]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || ((methaneLevelCritical <= tmp && 2 <= waterLevel) && pumpRunning == 0)) || !(systemActive == 1)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 664]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: ((((((\result == 0 && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) && (!(methaneLevelCritical == 0) || !(systemActive == 1))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((((\result == 0 && methAndRunningLastTime == \old(methAndRunningLastTime)) && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((waterLevel == \old(waterLevel) && methAndRunningLastTime == \old(methAndRunningLastTime)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && pumpRunning == 0) || (\result == 1 && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((((\result == 1 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 176]: Loop Invariant Derived loop invariant: (((((((waterLevel == \old(waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(systemActive == 1)) || pumpRunning == 0)) && (((((tmp == 0 && 2 <= waterLevel) || (tmp == 0 && pumpRunning == \old(pumpRunning))) || (tmp == 0 && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((tmp == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(systemActive == 0))) && (((!(1 <= methaneLevelCritical) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2021-12-16 00:59:33,690 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE