./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 797436b26f0180d1dd4048b2036765c1f76ffc9f34d72e35837e9efcc5780486 --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:07:39,694 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:07:39,695 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:07:39,718 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:07:39,718 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:07:39,719 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:07:39,720 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:07:39,721 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:07:39,723 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:07:39,723 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:07:39,724 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:07:39,725 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:07:39,725 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:07:39,726 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:07:39,740 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:07:39,741 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:07:39,742 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:07:39,742 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:07:39,743 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:07:39,745 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:07:39,746 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:07:39,750 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:07:39,751 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:07:39,751 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:07:39,753 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:07:39,756 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:07:39,757 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:07:39,757 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:07:39,759 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:07:39,760 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:07:39,760 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:07:39,760 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:07:39,762 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:07:39,762 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:07:39,763 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:07:39,764 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:07:39,765 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:07:39,765 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:07:39,765 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:07:39,766 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:07:39,766 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:07:39,767 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:07:39,795 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:07:39,797 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:07:39,798 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:07:39,798 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:07:39,799 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:07:39,799 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:07:39,799 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:07:39,799 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:07:39,800 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:07:39,800 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:07:39,800 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:07:39,801 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:07:39,801 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:07:39,801 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:07:39,801 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:07:39,801 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:07:39,801 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:07:39,801 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:07:39,802 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:07:39,802 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:07:39,802 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:07:39,802 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:07:39,802 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:07:39,802 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:07:39,802 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:07:39,803 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:07:39,803 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:07:39,803 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:07:39,803 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:07:39,803 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:07:39,803 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:07:39,804 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:07:39,804 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:07:39,804 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:07:39,804 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 797436b26f0180d1dd4048b2036765c1f76ffc9f34d72e35837e9efcc5780486 [2021-12-17 15:07:40,017 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:07:40,032 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:07:40,034 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:07:40,035 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:07:40,035 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:07:40,036 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c [2021-12-17 15:07:40,083 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/53e47a297/da61cd275dca41849fa752f7b9ecb557/FLAGd4e38bd20 [2021-12-17 15:07:40,571 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:07:40,572 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c [2021-12-17 15:07:40,584 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/53e47a297/da61cd275dca41849fa752f7b9ecb557/FLAGd4e38bd20 [2021-12-17 15:07:40,899 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/53e47a297/da61cd275dca41849fa752f7b9ecb557 [2021-12-17 15:07:40,901 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:07:40,902 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:07:40,904 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:07:40,904 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:07:40,907 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:07:40,907 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:07:40" (1/1) ... [2021-12-17 15:07:40,908 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6af86085 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:40, skipping insertion in model container [2021-12-17 15:07:40,908 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:07:40" (1/1) ... [2021-12-17 15:07:40,912 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:07:40,945 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:07:41,164 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c[17766,17779] [2021-12-17 15:07:41,169 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:07:41,174 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:07:41,236 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c[17766,17779] [2021-12-17 15:07:41,237 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:07:41,266 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:07:41,266 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:41 WrapperNode [2021-12-17 15:07:41,266 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:07:41,267 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:07:41,267 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:07:41,267 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:07:41,272 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:41" (1/1) ... [2021-12-17 15:07:41,290 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:41" (1/1) ... [2021-12-17 15:07:41,323 INFO L137 Inliner]: procedures = 57, calls = 159, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 252 [2021-12-17 15:07:41,324 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:07:41,325 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:07:41,325 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:07:41,325 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:07:41,331 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:41" (1/1) ... [2021-12-17 15:07:41,331 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:41" (1/1) ... [2021-12-17 15:07:41,342 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:41" (1/1) ... [2021-12-17 15:07:41,348 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:41" (1/1) ... [2021-12-17 15:07:41,352 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:41" (1/1) ... [2021-12-17 15:07:41,356 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:41" (1/1) ... [2021-12-17 15:07:41,360 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:41" (1/1) ... [2021-12-17 15:07:41,367 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:07:41,368 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:07:41,368 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:07:41,368 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:07:41,369 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:41" (1/1) ... [2021-12-17 15:07:41,375 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:07:41,384 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:07:41,395 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:07:41,400 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:07:41,418 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:07:41,418 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:07:41,419 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:07:41,419 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:07:41,419 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:07:41,419 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:07:41,419 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:07:41,419 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-17 15:07:41,419 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-17 15:07:41,419 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:07:41,420 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:07:41,420 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:07:41,420 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:07:41,420 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-17 15:07:41,420 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-17 15:07:41,420 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-17 15:07:41,420 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-17 15:07:41,420 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:07:41,421 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:07:41,421 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:07:41,421 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:07:41,421 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:07:41,479 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:07:41,481 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:07:41,783 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:07:41,788 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:07:41,788 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:07:41,789 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:07:41 BoogieIcfgContainer [2021-12-17 15:07:41,789 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:07:41,791 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:07:41,791 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:07:41,803 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:07:41,804 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:07:40" (1/3) ... [2021-12-17 15:07:41,804 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@64fe976a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:07:41, skipping insertion in model container [2021-12-17 15:07:41,804 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:41" (2/3) ... [2021-12-17 15:07:41,805 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@64fe976a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:07:41, skipping insertion in model container [2021-12-17 15:07:41,805 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:07:41" (3/3) ... [2021-12-17 15:07:41,806 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product48.cil.c [2021-12-17 15:07:41,809 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:07:41,809 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:07:41,886 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:07:41,894 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:07:41,894 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:07:41,920 INFO L276 IsEmpty]: Start isEmpty. Operand has 103 states, 76 states have (on average 1.368421052631579) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-17 15:07:41,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-17 15:07:41,927 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:41,928 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:41,928 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:41,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:41,933 INFO L85 PathProgramCache]: Analyzing trace with hash 1420238352, now seen corresponding path program 1 times [2021-12-17 15:07:41,939 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:41,939 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [497669261] [2021-12-17 15:07:41,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:41,940 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:42,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:42,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:07:42,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:42,139 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:42,140 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:42,140 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [497669261] [2021-12-17 15:07:42,140 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [497669261] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:42,141 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:42,141 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:07:42,142 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1044638188] [2021-12-17 15:07:42,142 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:42,145 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:07:42,146 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:42,167 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:07:42,168 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:07:42,170 INFO L87 Difference]: Start difference. First operand has 103 states, 76 states have (on average 1.368421052631579) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:42,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:42,210 INFO L93 Difference]: Finished difference Result 197 states and 266 transitions. [2021-12-17 15:07:42,211 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:07:42,212 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-17 15:07:42,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:42,222 INFO L225 Difference]: With dead ends: 197 [2021-12-17 15:07:42,222 INFO L226 Difference]: Without dead ends: 94 [2021-12-17 15:07:42,226 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:07:42,229 INFO L933 BasicCegarLoop]: 130 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:42,230 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:42,240 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2021-12-17 15:07:42,262 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2021-12-17 15:07:42,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 69 states have (on average 1.3043478260869565) internal successors, (90), 77 states have internal predecessors, (90), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2021-12-17 15:07:42,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 121 transitions. [2021-12-17 15:07:42,270 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 121 transitions. Word has length 25 [2021-12-17 15:07:42,271 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:42,271 INFO L470 AbstractCegarLoop]: Abstraction has 94 states and 121 transitions. [2021-12-17 15:07:42,271 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:42,271 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 121 transitions. [2021-12-17 15:07:42,274 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-17 15:07:42,275 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:42,275 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:42,275 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:07:42,276 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:42,278 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:42,278 INFO L85 PathProgramCache]: Analyzing trace with hash -193757144, now seen corresponding path program 1 times [2021-12-17 15:07:42,278 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:42,278 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1542823687] [2021-12-17 15:07:42,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:42,278 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:42,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:42,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-17 15:07:42,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:42,357 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:42,357 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:42,357 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1542823687] [2021-12-17 15:07:42,357 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1542823687] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:42,358 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:42,358 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:07:42,358 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1150122694] [2021-12-17 15:07:42,358 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:42,359 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:07:42,360 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:42,360 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:07:42,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:42,361 INFO L87 Difference]: Start difference. First operand 94 states and 121 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:42,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:42,377 INFO L93 Difference]: Finished difference Result 148 states and 190 transitions. [2021-12-17 15:07:42,378 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:07:42,378 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-17 15:07:42,379 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:42,380 INFO L225 Difference]: With dead ends: 148 [2021-12-17 15:07:42,380 INFO L226 Difference]: Without dead ends: 85 [2021-12-17 15:07:42,383 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:42,385 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 17 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:42,386 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 194 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:42,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2021-12-17 15:07:42,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2021-12-17 15:07:42,395 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-17 15:07:42,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 109 transitions. [2021-12-17 15:07:42,396 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 109 transitions. Word has length 26 [2021-12-17 15:07:42,396 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:42,397 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 109 transitions. [2021-12-17 15:07:42,397 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:42,397 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2021-12-17 15:07:42,401 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2021-12-17 15:07:42,402 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:42,402 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:42,402 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:07:42,402 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:42,405 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:42,408 INFO L85 PathProgramCache]: Analyzing trace with hash -150671396, now seen corresponding path program 1 times [2021-12-17 15:07:42,409 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:42,409 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1273840114] [2021-12-17 15:07:42,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:42,409 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:42,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:42,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:07:42,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:42,487 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:42,487 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:42,487 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1273840114] [2021-12-17 15:07:42,487 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1273840114] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:42,488 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:42,488 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:42,488 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [495416288] [2021-12-17 15:07:42,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:42,489 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:42,489 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:42,489 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:42,490 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:42,490 INFO L87 Difference]: Start difference. First operand 85 states and 109 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:42,716 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:42,716 INFO L93 Difference]: Finished difference Result 296 states and 393 transitions. [2021-12-17 15:07:42,716 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-17 15:07:42,716 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2021-12-17 15:07:42,717 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:42,721 INFO L225 Difference]: With dead ends: 296 [2021-12-17 15:07:42,721 INFO L226 Difference]: Without dead ends: 219 [2021-12-17 15:07:42,722 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2021-12-17 15:07:42,726 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 309 mSDsluCounter, 359 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 309 SdHoareTripleChecker+Valid, 497 SdHoareTripleChecker+Invalid, 182 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:42,727 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [309 Valid, 497 Invalid, 182 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:07:42,729 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 219 states. [2021-12-17 15:07:42,746 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 219 to 197. [2021-12-17 15:07:42,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 144 states have (on average 1.3541666666666667) internal successors, (195), 162 states have internal predecessors, (195), 31 states have call successors, (31), 21 states have call predecessors, (31), 21 states have return successors, (32), 23 states have call predecessors, (32), 31 states have call successors, (32) [2021-12-17 15:07:42,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 258 transitions. [2021-12-17 15:07:42,750 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 258 transitions. Word has length 31 [2021-12-17 15:07:42,750 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:42,750 INFO L470 AbstractCegarLoop]: Abstraction has 197 states and 258 transitions. [2021-12-17 15:07:42,750 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:42,750 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 258 transitions. [2021-12-17 15:07:42,752 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-12-17 15:07:42,753 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:42,753 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:42,753 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:07:42,754 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:42,754 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:42,754 INFO L85 PathProgramCache]: Analyzing trace with hash 153261204, now seen corresponding path program 1 times [2021-12-17 15:07:42,754 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:42,755 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1822260086] [2021-12-17 15:07:42,755 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:42,755 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:42,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:42,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:07:42,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:42,806 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:42,806 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:42,806 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1822260086] [2021-12-17 15:07:42,806 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1822260086] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:42,806 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:42,807 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:42,807 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [381620669] [2021-12-17 15:07:42,807 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:42,807 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:42,808 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:42,808 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:42,808 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:42,808 INFO L87 Difference]: Start difference. First operand 197 states and 258 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:42,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:42,896 INFO L93 Difference]: Finished difference Result 573 states and 762 transitions. [2021-12-17 15:07:42,896 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:07:42,896 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2021-12-17 15:07:42,896 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:42,899 INFO L225 Difference]: With dead ends: 573 [2021-12-17 15:07:42,899 INFO L226 Difference]: Without dead ends: 384 [2021-12-17 15:07:42,899 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:07:42,900 INFO L933 BasicCegarLoop]: 119 mSDtfsCounter, 77 mSDsluCounter, 418 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 537 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:42,900 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [80 Valid, 537 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:42,901 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 384 states. [2021-12-17 15:07:42,931 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 384 to 375. [2021-12-17 15:07:42,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 375 states, 270 states have (on average 1.3333333333333333) internal successors, (360), 305 states have internal predecessors, (360), 62 states have call successors, (62), 42 states have call predecessors, (62), 42 states have return successors, (67), 46 states have call predecessors, (67), 62 states have call successors, (67) [2021-12-17 15:07:42,933 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 375 states to 375 states and 489 transitions. [2021-12-17 15:07:42,933 INFO L78 Accepts]: Start accepts. Automaton has 375 states and 489 transitions. Word has length 34 [2021-12-17 15:07:42,934 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:42,934 INFO L470 AbstractCegarLoop]: Abstraction has 375 states and 489 transitions. [2021-12-17 15:07:42,934 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:42,934 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 489 transitions. [2021-12-17 15:07:42,935 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-17 15:07:42,935 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:42,935 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:42,936 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:07:42,936 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:42,936 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:42,936 INFO L85 PathProgramCache]: Analyzing trace with hash 1754015376, now seen corresponding path program 1 times [2021-12-17 15:07:42,936 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:42,937 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [871368885] [2021-12-17 15:07:42,937 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:42,937 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:42,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:42,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:07:42,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:42,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:07:42,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:42,979 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:42,979 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:42,979 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [871368885] [2021-12-17 15:07:42,979 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [871368885] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:42,979 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:42,980 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:42,980 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2034141426] [2021-12-17 15:07:42,980 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:42,980 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:42,980 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:42,981 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:42,981 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:42,981 INFO L87 Difference]: Start difference. First operand 375 states and 489 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:07:43,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:43,181 INFO L93 Difference]: Finished difference Result 930 states and 1231 transitions. [2021-12-17 15:07:43,182 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:07:43,182 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2021-12-17 15:07:43,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:43,185 INFO L225 Difference]: With dead ends: 930 [2021-12-17 15:07:43,185 INFO L226 Difference]: Without dead ends: 563 [2021-12-17 15:07:43,186 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:07:43,186 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 130 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 221 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 270 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 221 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:43,186 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [137 Valid, 254 Invalid, 270 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 221 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:07:43,187 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 563 states. [2021-12-17 15:07:43,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 563 to 544. [2021-12-17 15:07:43,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 544 states, 395 states have (on average 1.268354430379747) internal successors, (501), 432 states have internal predecessors, (501), 80 states have call successors, (80), 68 states have call predecessors, (80), 68 states have return successors, (105), 74 states have call predecessors, (105), 80 states have call successors, (105) [2021-12-17 15:07:43,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 544 states to 544 states and 686 transitions. [2021-12-17 15:07:43,209 INFO L78 Accepts]: Start accepts. Automaton has 544 states and 686 transitions. Word has length 38 [2021-12-17 15:07:43,209 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:43,209 INFO L470 AbstractCegarLoop]: Abstraction has 544 states and 686 transitions. [2021-12-17 15:07:43,209 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:07:43,209 INFO L276 IsEmpty]: Start isEmpty. Operand 544 states and 686 transitions. [2021-12-17 15:07:43,211 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-17 15:07:43,211 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:43,211 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:43,211 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:07:43,211 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:43,212 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:43,212 INFO L85 PathProgramCache]: Analyzing trace with hash 684559813, now seen corresponding path program 1 times [2021-12-17 15:07:43,212 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:43,212 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1980914509] [2021-12-17 15:07:43,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:43,212 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:43,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:43,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:07:43,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:43,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:07:43,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:43,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:43,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:43,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:07:43,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:43,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-17 15:07:43,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:43,274 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:07:43,274 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:43,275 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1980914509] [2021-12-17 15:07:43,275 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1980914509] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:43,275 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:43,275 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:07:43,275 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1376134242] [2021-12-17 15:07:43,275 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:43,276 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:07:43,276 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:43,276 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:07:43,276 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:07:43,276 INFO L87 Difference]: Start difference. First operand 544 states and 686 transitions. Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:07:43,501 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:43,501 INFO L93 Difference]: Finished difference Result 1196 states and 1547 transitions. [2021-12-17 15:07:43,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-17 15:07:43,501 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2021-12-17 15:07:43,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:43,504 INFO L225 Difference]: With dead ends: 1196 [2021-12-17 15:07:43,504 INFO L226 Difference]: Without dead ends: 660 [2021-12-17 15:07:43,505 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-17 15:07:43,506 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 136 mSDsluCounter, 179 mSDsCounter, 0 mSdLazyCounter, 274 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 270 SdHoareTripleChecker+Invalid, 334 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 274 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:43,506 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [137 Valid, 270 Invalid, 334 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 274 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:07:43,507 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 660 states. [2021-12-17 15:07:43,550 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 660 to 638. [2021-12-17 15:07:43,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 638 states, 469 states have (on average 1.2430703624733475) internal successors, (583), 506 states have internal predecessors, (583), 88 states have call successors, (88), 68 states have call predecessors, (88), 80 states have return successors, (125), 90 states have call predecessors, (125), 88 states have call successors, (125) [2021-12-17 15:07:43,554 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 638 states to 638 states and 796 transitions. [2021-12-17 15:07:43,554 INFO L78 Accepts]: Start accepts. Automaton has 638 states and 796 transitions. Word has length 61 [2021-12-17 15:07:43,554 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:43,555 INFO L470 AbstractCegarLoop]: Abstraction has 638 states and 796 transitions. [2021-12-17 15:07:43,555 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:07:43,555 INFO L276 IsEmpty]: Start isEmpty. Operand 638 states and 796 transitions. [2021-12-17 15:07:43,556 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-17 15:07:43,556 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:43,556 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:43,556 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:07:43,556 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:43,557 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:43,557 INFO L85 PathProgramCache]: Analyzing trace with hash 1386159687, now seen corresponding path program 1 times [2021-12-17 15:07:43,557 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:43,557 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1916386492] [2021-12-17 15:07:43,557 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:43,557 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:43,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:43,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:07:43,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:43,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:07:43,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:43,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:43,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:43,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:07:43,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:43,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-17 15:07:43,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:43,619 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:07:43,619 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:43,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1916386492] [2021-12-17 15:07:43,619 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1916386492] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:43,619 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:43,619 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-17 15:07:43,619 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1925924829] [2021-12-17 15:07:43,619 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:43,620 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-17 15:07:43,620 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:43,620 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-17 15:07:43,620 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-12-17 15:07:43,620 INFO L87 Difference]: Start difference. First operand 638 states and 796 transitions. Second operand has 8 states, 8 states have (on average 6.0) internal successors, (48), 6 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:07:43,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:43,873 INFO L93 Difference]: Finished difference Result 1314 states and 1685 transitions. [2021-12-17 15:07:43,873 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-17 15:07:43,873 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.0) internal successors, (48), 6 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2021-12-17 15:07:43,873 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:43,876 INFO L225 Difference]: With dead ends: 1314 [2021-12-17 15:07:43,876 INFO L226 Difference]: Without dead ends: 684 [2021-12-17 15:07:43,878 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=42, Invalid=114, Unknown=0, NotChecked=0, Total=156 [2021-12-17 15:07:43,878 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 191 mSDsluCounter, 160 mSDsCounter, 0 mSdLazyCounter, 370 mSolverCounterSat, 71 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 192 SdHoareTripleChecker+Valid, 251 SdHoareTripleChecker+Invalid, 441 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 71 IncrementalHoareTripleChecker+Valid, 370 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:43,878 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [192 Valid, 251 Invalid, 441 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [71 Valid, 370 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:07:43,879 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 684 states. [2021-12-17 15:07:43,934 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 684 to 646. [2021-12-17 15:07:43,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 646 states, 477 states have (on average 1.2389937106918238) internal successors, (591), 514 states have internal predecessors, (591), 88 states have call successors, (88), 68 states have call predecessors, (88), 80 states have return successors, (125), 90 states have call predecessors, (125), 88 states have call successors, (125) [2021-12-17 15:07:43,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 646 states to 646 states and 804 transitions. [2021-12-17 15:07:43,938 INFO L78 Accepts]: Start accepts. Automaton has 646 states and 804 transitions. Word has length 61 [2021-12-17 15:07:43,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:43,938 INFO L470 AbstractCegarLoop]: Abstraction has 646 states and 804 transitions. [2021-12-17 15:07:43,941 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.0) internal successors, (48), 6 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-17 15:07:43,941 INFO L276 IsEmpty]: Start isEmpty. Operand 646 states and 804 transitions. [2021-12-17 15:07:43,942 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2021-12-17 15:07:43,942 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:43,943 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:43,943 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:07:43,943 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:43,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:43,944 INFO L85 PathProgramCache]: Analyzing trace with hash 1313773129, now seen corresponding path program 1 times [2021-12-17 15:07:43,944 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:43,944 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [730074990] [2021-12-17 15:07:43,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:43,944 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:43,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:43,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:07:43,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:44,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-12-17 15:07:44,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:44,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:44,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:44,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:07:44,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:44,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2021-12-17 15:07:44,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:44,023 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:07:44,023 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:44,023 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [730074990] [2021-12-17 15:07:44,023 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [730074990] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:44,023 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:44,023 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:44,023 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [333605571] [2021-12-17 15:07:44,024 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:44,024 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:44,024 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:44,024 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:44,024 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:44,025 INFO L87 Difference]: Start difference. First operand 646 states and 804 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:07:44,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:44,299 INFO L93 Difference]: Finished difference Result 1896 states and 2463 transitions. [2021-12-17 15:07:44,299 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-17 15:07:44,299 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2021-12-17 15:07:44,299 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:44,304 INFO L225 Difference]: With dead ends: 1896 [2021-12-17 15:07:44,304 INFO L226 Difference]: Without dead ends: 1258 [2021-12-17 15:07:44,306 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-17 15:07:44,306 INFO L933 BasicCegarLoop]: 141 mSDtfsCounter, 343 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 262 mSolverCounterSat, 142 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 346 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 404 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 142 IncrementalHoareTripleChecker+Valid, 262 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:44,306 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [346 Valid, 289 Invalid, 404 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [142 Valid, 262 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:07:44,307 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1258 states. [2021-12-17 15:07:44,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1258 to 1246. [2021-12-17 15:07:44,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1246 states, 927 states have (on average 1.2179072276159655) internal successors, (1129), 988 states have internal predecessors, (1129), 166 states have call successors, (166), 150 states have call predecessors, (166), 152 states have return successors, (269), 162 states have call predecessors, (269), 166 states have call successors, (269) [2021-12-17 15:07:44,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1246 states to 1246 states and 1564 transitions. [2021-12-17 15:07:44,351 INFO L78 Accepts]: Start accepts. Automaton has 1246 states and 1564 transitions. Word has length 61 [2021-12-17 15:07:44,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:44,351 INFO L470 AbstractCegarLoop]: Abstraction has 1246 states and 1564 transitions. [2021-12-17 15:07:44,351 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 4 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-17 15:07:44,352 INFO L276 IsEmpty]: Start isEmpty. Operand 1246 states and 1564 transitions. [2021-12-17 15:07:44,353 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-17 15:07:44,353 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:44,353 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:44,354 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:07:44,354 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:44,354 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:44,354 INFO L85 PathProgramCache]: Analyzing trace with hash 205893359, now seen corresponding path program 1 times [2021-12-17 15:07:44,354 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:44,354 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [519745108] [2021-12-17 15:07:44,355 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:44,355 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:44,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:44,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:07:44,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:44,406 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:07:44,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:44,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-17 15:07:44,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:44,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:44,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:44,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:07:44,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:44,480 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-17 15:07:44,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:44,483 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-17 15:07:44,483 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:44,483 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [519745108] [2021-12-17 15:07:44,483 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [519745108] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:07:44,483 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [614433495] [2021-12-17 15:07:44,483 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:44,483 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:07:44,483 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:07:44,485 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:07:44,544 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:07:44,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:44,612 INFO L263 TraceCheckSpWp]: Trace formula consists of 398 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-17 15:07:44,616 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:07:44,822 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:44,822 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-17 15:07:44,822 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [614433495] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:44,822 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-17 15:07:44,822 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2021-12-17 15:07:44,823 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [456443726] [2021-12-17 15:07:44,823 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:44,823 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-17 15:07:44,823 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:44,824 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-17 15:07:44,824 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=332, Unknown=0, NotChecked=0, Total=380 [2021-12-17 15:07:44,824 INFO L87 Difference]: Start difference. First operand 1246 states and 1564 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2021-12-17 15:07:44,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:44,978 INFO L93 Difference]: Finished difference Result 2440 states and 3074 transitions. [2021-12-17 15:07:44,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:07:44,979 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 65 [2021-12-17 15:07:44,980 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:44,984 INFO L225 Difference]: With dead ends: 2440 [2021-12-17 15:07:44,984 INFO L226 Difference]: Without dead ends: 1202 [2021-12-17 15:07:44,992 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 87 GetRequests, 69 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=332, Unknown=0, NotChecked=0, Total=380 [2021-12-17 15:07:44,996 INFO L933 BasicCegarLoop]: 196 mSDtfsCounter, 71 mSDsluCounter, 909 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 1105 SdHoareTripleChecker+Invalid, 195 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:44,996 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [75 Valid, 1105 Invalid, 195 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:07:44,998 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1202 states. [2021-12-17 15:07:45,084 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1202 to 1198. [2021-12-17 15:07:45,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1198 states, 889 states have (on average 1.201349831271091) internal successors, (1068), 948 states have internal predecessors, (1068), 162 states have call successors, (162), 146 states have call predecessors, (162), 146 states have return successors, (236), 156 states have call predecessors, (236), 162 states have call successors, (236) [2021-12-17 15:07:45,089 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1198 states to 1198 states and 1466 transitions. [2021-12-17 15:07:45,108 INFO L78 Accepts]: Start accepts. Automaton has 1198 states and 1466 transitions. Word has length 65 [2021-12-17 15:07:45,108 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:45,108 INFO L470 AbstractCegarLoop]: Abstraction has 1198 states and 1466 transitions. [2021-12-17 15:07:45,109 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2021-12-17 15:07:45,109 INFO L276 IsEmpty]: Start isEmpty. Operand 1198 states and 1466 transitions. [2021-12-17 15:07:45,112 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2021-12-17 15:07:45,112 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:45,112 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:45,155 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2021-12-17 15:07:45,314 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:07:45,314 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:45,314 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:45,314 INFO L85 PathProgramCache]: Analyzing trace with hash 1582774687, now seen corresponding path program 1 times [2021-12-17 15:07:45,314 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:45,315 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1748780647] [2021-12-17 15:07:45,315 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:45,315 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:45,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:07:45,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-12-17 15:07:45,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:07:45,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:45,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:07:45,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-17 15:07:45,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2021-12-17 15:07:45,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-12-17 15:07:45,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:07:45,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-12-17 15:07:45,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:45,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-12-17 15:07:45,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,540 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2021-12-17 15:07:45,540 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:45,540 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1748780647] [2021-12-17 15:07:45,540 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1748780647] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:07:45,540 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1491839817] [2021-12-17 15:07:45,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:45,540 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:07:45,540 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:07:45,556 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:07:45,583 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-17 15:07:45,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:45,654 INFO L263 TraceCheckSpWp]: Trace formula consists of 510 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-17 15:07:45,656 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:07:45,848 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:07:45,848 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-17 15:07:45,848 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1491839817] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:45,848 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-17 15:07:45,848 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 20 [2021-12-17 15:07:45,848 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1370807682] [2021-12-17 15:07:45,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:45,849 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-17 15:07:45,849 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:45,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-17 15:07:45,850 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=329, Unknown=0, NotChecked=0, Total=380 [2021-12-17 15:07:45,850 INFO L87 Difference]: Start difference. First operand 1198 states and 1466 transitions. Second operand has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2021-12-17 15:07:45,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:45,960 INFO L93 Difference]: Finished difference Result 2058 states and 2546 transitions. [2021-12-17 15:07:45,960 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:07:45,960 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 110 [2021-12-17 15:07:45,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:45,961 INFO L225 Difference]: With dead ends: 2058 [2021-12-17 15:07:45,961 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:07:45,965 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 146 GetRequests, 126 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=63, Invalid=399, Unknown=0, NotChecked=0, Total=462 [2021-12-17 15:07:45,965 INFO L933 BasicCegarLoop]: 193 mSDtfsCounter, 76 mSDsluCounter, 674 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 867 SdHoareTripleChecker+Invalid, 121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:45,966 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [80 Valid, 867 Invalid, 121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:07:45,966 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:07:45,966 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:07:45,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:07:45,966 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:07:45,967 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2021-12-17 15:07:45,967 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:45,967 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:07:45,967 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 6 states have internal predecessors, (79), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2021-12-17 15:07:45,967 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:07:45,967 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:07:45,969 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:07:46,007 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-17 15:07:46,198 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-17 15:07:46,200 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:07:50,219 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 378 385) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2021-12-17 15:07:50,219 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 378 385) no Hoare annotation was computed. [2021-12-17 15:07:50,219 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 378 385) no Hoare annotation was computed. [2021-12-17 15:07:50,219 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 294 300) no Hoare annotation was computed. [2021-12-17 15:07:50,219 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 294 300) the Hoare annotation is: true [2021-12-17 15:07:50,220 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse1 (= ~methaneLevelCritical~0 0))) (and (or (= 0 ~systemActive~0) .cse0 .cse1) (or .cse2 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|) (not (<= 1 |old(~methaneLevelCritical~0)|))) (or .cse0 .cse2 .cse1))) [2021-12-17 15:07:50,220 INFO L858 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2021-12-17 15:07:50,220 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2021-12-17 15:07:50,220 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 901 930) no Hoare annotation was computed. [2021-12-17 15:07:50,220 INFO L861 garLoopResultBuilder]: At program point L926(lines 901 930) the Hoare annotation is: true [2021-12-17 15:07:50,220 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 901 930) the Hoare annotation is: true [2021-12-17 15:07:50,220 INFO L858 garLoopResultBuilder]: For program point L922(line 922) no Hoare annotation was computed. [2021-12-17 15:07:50,220 INFO L858 garLoopResultBuilder]: For program point L915(lines 915 919) no Hoare annotation was computed. [2021-12-17 15:07:50,220 INFO L861 garLoopResultBuilder]: At program point L915-1(lines 915 919) the Hoare annotation is: true [2021-12-17 15:07:50,220 INFO L858 garLoopResultBuilder]: For program point L912(line 912) no Hoare annotation was computed. [2021-12-17 15:07:50,220 INFO L861 garLoopResultBuilder]: At program point L911-2(lines 911 925) the Hoare annotation is: true [2021-12-17 15:07:50,220 INFO L861 garLoopResultBuilder]: At program point L907(line 907) the Hoare annotation is: true [2021-12-17 15:07:50,220 INFO L858 garLoopResultBuilder]: For program point L907-1(line 907) no Hoare annotation was computed. [2021-12-17 15:07:50,220 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 270 293) no Hoare annotation was computed. [2021-12-17 15:07:50,220 INFO L858 garLoopResultBuilder]: For program point L895(line 895) no Hoare annotation was computed. [2021-12-17 15:07:50,220 INFO L858 garLoopResultBuilder]: For program point L507(lines 507 517) no Hoare annotation was computed. [2021-12-17 15:07:50,220 INFO L858 garLoopResultBuilder]: For program point L503(lines 503 520) no Hoare annotation was computed. [2021-12-17 15:07:50,220 INFO L854 garLoopResultBuilder]: At program point L342(line 342) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse3 .cse0) (or .cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1))) [2021-12-17 15:07:50,220 INFO L854 garLoopResultBuilder]: At program point L503-1(lines 495 523) the Hoare annotation is: (let ((.cse8 (= 0 ~systemActive~0))) (let ((.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~5#1| 0)) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse13 (<= 2 ~waterLevel~0)) (.cse9 (not .cse8))) (let ((.cse0 (and .cse11 .cse14 .cse13 .cse9)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (and .cse11 .cse10)) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse5 (= ~waterLevel~0 1)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not .cse14))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse1) (or .cse6 .cse7 .cse1) (or .cse8 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse9 .cse10) .cse6 (and .cse7 .cse9 .cse10)) (or .cse8 .cse0 (and .cse11 .cse7) .cse2 .cse3) (or .cse4 .cse5 .cse1 .cse2) (or .cse12 .cse6 .cse1 .cse13) (or .cse12 .cse1 .cse13 .cse2))))) [2021-12-17 15:07:50,220 INFO L854 garLoopResultBuilder]: At program point L338(line 338) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse1) .cse2) (or .cse3 .cse4) (or .cse2 .cse3) (or .cse0 .cse1 .cse4))) [2021-12-17 15:07:50,221 INFO L854 garLoopResultBuilder]: At program point L334(line 334) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 .cse1) (or .cse2 .cse0) (or .cse3 .cse4 .cse1) (or .cse3 .cse2 .cse4))) [2021-12-17 15:07:50,221 INFO L858 garLoopResultBuilder]: For program point L334-1(line 334) no Hoare annotation was computed. [2021-12-17 15:07:50,221 INFO L854 garLoopResultBuilder]: At program point L896(lines 891 898) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1) (or .cse2 .cse3) (or .cse3 .cse0) (or .cse2 .cse1))) [2021-12-17 15:07:50,221 INFO L858 garLoopResultBuilder]: For program point L508(lines 508 514) no Hoare annotation was computed. [2021-12-17 15:07:50,221 INFO L854 garLoopResultBuilder]: At program point L347(line 347) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse10 (= ~methaneLevelCritical~0 0)) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (not .cse9)) (.cse13 (= ~pumpRunning~0 0)) (.cse14 (<= 1 ~methaneLevelCritical~0))) (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= ~waterLevel~0 1)) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (<= 2 ~waterLevel~0)) (.cse2 (not .cse14)) (.cse5 (and .cse11 .cse14 .cse12 .cse13)) (.cse8 (and .cse10 .cse11 .cse12 .cse13)) (.cse4 (not .cse10))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse3 .cse4) (or .cse2 .cse3 .cse5) (or .cse6 .cse3 .cse7 .cse4) (or .cse8 .cse3 .cse4) (or .cse6 .cse2 .cse3 .cse7) (or .cse9 .cse2 .cse5) (or .cse9 .cse8 .cse4))))) [2021-12-17 15:07:50,221 INFO L854 garLoopResultBuilder]: At program point L347-1(lines 328 352) the Hoare annotation is: (let ((.cse8 (= 0 ~systemActive~0))) (let ((.cse11 (<= 2 ~waterLevel~0)) (.cse13 (= ~methaneLevelCritical~0 0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (<= 1 ~methaneLevelCritical~0)) (.cse7 (not .cse8)) (.cse10 (= ~pumpRunning~0 0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse5 (= ~waterLevel~0 1)) (.cse9 (and .cse12 .cse14 .cse7 .cse10)) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not .cse14)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not .cse13)) (.cse3 (and .cse13 .cse11 .cse7))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse1) (or .cse4 .cse5 .cse1 .cse2) (or .cse1 .cse2 .cse7) (or .cse8 .cse6 .cse9 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse10)) (or .cse6 .cse1 .cse9) (or .cse0 .cse6 .cse1 .cse11) (or .cse8 .cse12 .cse2 .cse10 .cse3))))) [2021-12-17 15:07:50,221 INFO L858 garLoopResultBuilder]: For program point L281-1(lines 281 287) no Hoare annotation was computed. [2021-12-17 15:07:50,221 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2021-12-17 15:07:50,221 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 .cse1) (or .cse2 .cse0) (or .cse3 .cse4 .cse1) (or .cse3 .cse2 .cse4))) [2021-12-17 15:07:50,221 INFO L854 garLoopResultBuilder]: At program point L501(line 501) the Hoare annotation is: (let ((.cse10 (<= 2 ~waterLevel~0)) (.cse7 (= 0 ~systemActive~0)) (.cse11 (= ~methaneLevelCritical~0 0))) (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= ~waterLevel~0 1)) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not .cse11)) (.cse5 (and .cse11 .cse10 (not .cse7))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse3 .cse4) (or .cse7 (and .cse8 .cse6) .cse2 (and (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse6)) (or .cse9 .cse2 .cse3 .cse10) (or .cse9 .cse3 .cse10 .cse4) (or .cse7 .cse8 .cse4 .cse6 .cse5) (or .cse2 .cse3 .cse6)))) [2021-12-17 15:07:50,221 INFO L858 garLoopResultBuilder]: For program point L501-1(line 501) no Hoare annotation was computed. [2021-12-17 15:07:50,221 INFO L854 garLoopResultBuilder]: At program point L402(lines 397 405) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= 0 ~systemActive~0)) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse3 (= ~pumpRunning~0 0))) (and (or (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1) .cse0 .cse1) (or (and .cse2 .cse3) .cse0 .cse1) (or .cse1 .cse4) (or .cse5 .cse4) (or (not (<= 2 |old(~waterLevel~0)|)) .cse0 .cse1 (<= 2 ~waterLevel~0)) (or .cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse0 (and .cse2 (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse3)))) [2021-12-17 15:07:50,221 INFO L858 garLoopResultBuilder]: For program point L274-1(lines 273 292) no Hoare annotation was computed. [2021-12-17 15:07:50,221 INFO L858 garLoopResultBuilder]: For program point L336(lines 336 344) no Hoare annotation was computed. [2021-12-17 15:07:50,221 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 270 293) the Hoare annotation is: (let ((.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= ~waterLevel~0 1)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= ~pumpRunning~0 0)) (.cse5 (= 0 ~systemActive~0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse2 .cse6) (or .cse0 .cse1 .cse3 .cse7) (or .cse4 .cse3 .cse6 .cse7) (or .cse5 .cse8 .cse7) (or .cse4 .cse2 .cse3 .cse6) (or .cse3 .cse7 .cse9) (or .cse4 .cse5 .cse6 .cse7) (or .cse2 .cse3 .cse9) (or .cse5 .cse2 .cse8))) [2021-12-17 15:07:50,221 INFO L858 garLoopResultBuilder]: For program point L332(lines 332 349) no Hoare annotation was computed. [2021-12-17 15:07:50,221 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 270 293) no Hoare annotation was computed. [2021-12-17 15:07:50,222 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 895) no Hoare annotation was computed. [2021-12-17 15:07:50,222 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 95 103) the Hoare annotation is: true [2021-12-17 15:07:50,222 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 95 103) no Hoare annotation was computed. [2021-12-17 15:07:50,222 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 95 103) no Hoare annotation was computed. [2021-12-17 15:07:50,222 INFO L854 garLoopResultBuilder]: At program point L225(line 225) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 (<= 1 ~methaneLevelCritical~0) .cse4) (and .cse0 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2021-12-17 15:07:50,222 INFO L854 garLoopResultBuilder]: At program point L481(lines 476 483) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3) (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2 .cse3))) [2021-12-17 15:07:50,222 INFO L854 garLoopResultBuilder]: At program point L250(lines 203 252) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 (<= 1 ~methaneLevelCritical~0) .cse4) (and .cse0 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2021-12-17 15:07:50,222 INFO L854 garLoopResultBuilder]: At program point L473(lines 461 475) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2 .cse3) (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3))) [2021-12-17 15:07:50,222 INFO L854 garLoopResultBuilder]: At program point L184(lines 179 187) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:50,222 INFO L858 garLoopResultBuilder]: For program point L213(lines 213 219) no Hoare annotation was computed. [2021-12-17 15:07:50,222 INFO L858 garLoopResultBuilder]: For program point L213-1(lines 213 219) no Hoare annotation was computed. [2021-12-17 15:07:50,222 INFO L858 garLoopResultBuilder]: For program point L465(lines 465 471) no Hoare annotation was computed. [2021-12-17 15:07:50,222 INFO L854 garLoopResultBuilder]: At program point L176(lines 172 178) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:50,222 INFO L858 garLoopResultBuilder]: For program point L465-1(lines 465 471) no Hoare annotation was computed. [2021-12-17 15:07:50,222 INFO L858 garLoopResultBuilder]: For program point L205(lines 205 209) no Hoare annotation was computed. [2021-12-17 15:07:50,222 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:07:50,222 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:07:50,222 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:07:50,222 INFO L861 garLoopResultBuilder]: At program point L970(lines 962 972) the Hoare annotation is: true [2021-12-17 15:07:50,222 INFO L854 garLoopResultBuilder]: At program point L169(lines 165 171) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:50,222 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:07:50,223 INFO L861 garLoopResultBuilder]: At program point L256(lines 193 260) the Hoare annotation is: true [2021-12-17 15:07:50,223 INFO L858 garLoopResultBuilder]: For program point L223(lines 223 229) no Hoare annotation was computed. [2021-12-17 15:07:50,223 INFO L858 garLoopResultBuilder]: For program point L223-1(lines 223 229) no Hoare annotation was computed. [2021-12-17 15:07:50,223 INFO L858 garLoopResultBuilder]: For program point L983(lines 983 990) no Hoare annotation was computed. [2021-12-17 15:07:50,223 INFO L854 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 (<= 1 ~methaneLevelCritical~0) .cse4) (and .cse0 .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))))) [2021-12-17 15:07:50,223 INFO L858 garLoopResultBuilder]: For program point L983-2(lines 983 990) no Hoare annotation was computed. [2021-12-17 15:07:50,223 INFO L854 garLoopResultBuilder]: At program point L467(line 467) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= 1 ~methaneLevelCritical~0) .cse3) (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2 .cse3))) [2021-12-17 15:07:50,223 INFO L854 garLoopResultBuilder]: At program point L492(lines 487 494) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 |ULTIMATE.start_main_~tmp~9#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:50,223 INFO L861 garLoopResultBuilder]: At program point L992(lines 973 995) the Hoare annotation is: true [2021-12-17 15:07:50,223 INFO L854 garLoopResultBuilder]: At program point L959(lines 955 961) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= 1 |ULTIMATE.start_valid_product_#res#1|) (= ~systemActive~0 |ULTIMATE.start_main_~tmp~9#1|) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:07:50,223 INFO L854 garLoopResultBuilder]: At program point L253(lines 202 254) the Hoare annotation is: false [2021-12-17 15:07:50,223 INFO L858 garLoopResultBuilder]: For program point L241(lines 241 247) no Hoare annotation was computed. [2021-12-17 15:07:50,223 INFO L854 garLoopResultBuilder]: At program point L241-2(lines 233 248) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= 1 |ULTIMATE.start_main_~tmp~9#1|)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res#1|)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse4) (and .cse0 .cse1 .cse3 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse6))) [2021-12-17 15:07:50,223 INFO L858 garLoopResultBuilder]: For program point L204(lines 203 252) no Hoare annotation was computed. [2021-12-17 15:07:50,223 INFO L858 garLoopResultBuilder]: For program point L233(lines 233 248) no Hoare annotation was computed. [2021-12-17 15:07:50,223 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2021-12-17 15:07:50,223 INFO L858 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2021-12-17 15:07:50,223 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (<= 2 ~waterLevel~0))) (and (or .cse0 (= 0 ~systemActive~0) .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse6) (or .cse0 .cse5 .cse1 .cse2) (or .cse3 .cse5 .cse4 .cse2) (or .cse0 .cse5 .cse6 .cse1))) [2021-12-17 15:07:50,223 INFO L854 garLoopResultBuilder]: At program point L316(line 316) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (= |processEnvironment__wrappee__methaneQuery_~tmp~1#1| 0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2) (not (= |old(~pumpRunning~0)| 0))) (or .cse0 (and .cse1 .cse2 (= ~pumpRunning~0 0)) (not (= ~methaneLevelCritical~0 0))))) [2021-12-17 15:07:50,224 INFO L858 garLoopResultBuilder]: For program point L310(lines 310 318) no Hoare annotation was computed. [2021-12-17 15:07:50,224 INFO L858 garLoopResultBuilder]: For program point L306(lines 306 323) no Hoare annotation was computed. [2021-12-17 15:07:50,224 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse3 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0))) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 (and .cse1 .cse2) (and .cse3 .cse2) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or .cse0 (and .cse3 .cse4 .cse2) (and .cse4 .cse1 .cse2) (not (= ~methaneLevelCritical~0 0)))))) [2021-12-17 15:07:50,224 INFO L858 garLoopResultBuilder]: For program point L368(lines 368 374) no Hoare annotation was computed. [2021-12-17 15:07:50,224 INFO L854 garLoopResultBuilder]: At program point L366(line 366) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2021-12-17 15:07:50,224 INFO L854 garLoopResultBuilder]: At program point L368-2(lines 361 377) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse1 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or .cse0 (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~3#1|) .cse1 (= ~pumpRunning~0 0)) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:07:50,224 INFO L858 garLoopResultBuilder]: For program point L366-1(line 366) no Hoare annotation was computed. [2021-12-17 15:07:50,224 INFO L854 garLoopResultBuilder]: At program point L457(lines 442 460) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse1 (not (= 0 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~4#1|))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0)) (.cse4 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse2 .cse6 .cse5) (not (= ~methaneLevelCritical~0 0))) (or .cse0 (and .cse6 .cse5) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) (and .cse1 .cse2 .cse3 .cse4)))) [2021-12-17 15:07:50,224 INFO L854 garLoopResultBuilder]: At program point L358(lines 353 360) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0))) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0))))) [2021-12-17 15:07:50,224 INFO L858 garLoopResultBuilder]: For program point L451(lines 451 455) no Hoare annotation was computed. [2021-12-17 15:07:50,224 INFO L858 garLoopResultBuilder]: For program point L451-2(lines 451 455) no Hoare annotation was computed. [2021-12-17 15:07:50,224 INFO L854 garLoopResultBuilder]: At program point L321(line 321) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= 0 ~systemActive~0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2))) [2021-12-17 15:07:50,224 INFO L858 garLoopResultBuilder]: For program point L321-1(lines 302 326) no Hoare annotation was computed. [2021-12-17 15:07:50,224 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 302 326) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0)) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0))))) [2021-12-17 15:07:50,224 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2021-12-17 15:07:50,224 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 302 326) no Hoare annotation was computed. [2021-12-17 15:07:50,224 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 386 396) the Hoare annotation is: true [2021-12-17 15:07:50,224 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 386 396) no Hoare annotation was computed. [2021-12-17 15:07:50,224 INFO L861 garLoopResultBuilder]: At program point L391(line 391) the Hoare annotation is: true [2021-12-17 15:07:50,224 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 386 396) no Hoare annotation was computed. [2021-12-17 15:07:50,224 INFO L858 garLoopResultBuilder]: For program point L391-1(line 391) no Hoare annotation was computed. [2021-12-17 15:07:50,227 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:50,227 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:07:50,257 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:07:50 BoogieIcfgContainer [2021-12-17 15:07:50,257 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:07:50,258 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:07:50,258 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:07:50,258 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:07:50,258 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:07:41" (3/4) ... [2021-12-17 15:07:50,263 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:07:50,268 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-17 15:07:50,268 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:07:50,268 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:07:50,268 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:07:50,268 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:07:50,268 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-17 15:07:50,268 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:07:50,268 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:07:50,268 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-17 15:07:50,278 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 49 nodes and edges [2021-12-17 15:07:50,279 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:07:50,279 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:07:50,279 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:07:50,279 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:07:50,280 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:07:50,280 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:07:50,295 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == 1) && pumpRunning == 0 [2021-12-17 15:07:50,295 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 [2021-12-17 15:07:50,295 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 [2021-12-17 15:07:50,295 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= methaneLevelCritical) && pumpRunning == 0)) || ((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) [2021-12-17 15:07:50,296 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0))) && ((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0))) && ((0 == systemActive || !(1 <= methaneLevelCritical)) || pumpRunning == \old(pumpRunning)) [2021-12-17 15:07:50,297 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(2 <= \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)) || (1 <= tmp && pumpRunning == 0))) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || (((pumpRunning == \old(pumpRunning) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel)) && ((((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) [2021-12-17 15:07:50,298 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= methaneLevelCritical) && systemActive == 1) || ((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && systemActive == 1) [2021-12-17 15:07:50,298 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0)) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && ((!(1 <= methaneLevelCritical) || pumpRunning == \old(pumpRunning)) || !(\old(pumpRunning) == 0))) && (((0 == systemActive || ((1 <= tmp && !(0 == systemActive)) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && !(0 == systemActive)) && pumpRunning == 0))) && ((((0 == systemActive || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || (tmp == 0 && pumpRunning == \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0))) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel)) && (((!(2 <= \old(waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2021-12-17 15:07:50,298 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= methaneLevelCritical) && pumpRunning == 0) [2021-12-17 15:07:50,298 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) && (((\result == 0 && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (0 == systemActive || !(methaneLevelCritical == 0))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel)) && (((0 == systemActive || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || ((\result == 0 && 1 <= tmp) && pumpRunning == 0)) [2021-12-17 15:07:50,298 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((0 == systemActive || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && (((0 == systemActive || ((methaneLevelCritical <= tmp && 2 <= waterLevel) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:07:50,298 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((0 == systemActive || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && ((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) [2021-12-17 15:07:50,298 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || (!(\result == 0) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) && (((0 == systemActive || ((!(\result == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) [2021-12-17 15:07:50,299 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (0 == systemActive || !(1 <= methaneLevelCritical))) && (!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0))) && (0 == systemActive || !(methaneLevelCritical == 0)) [2021-12-17 15:07:50,299 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == systemActive || ((((!(0 == tmp) && pumpRunning == \old(pumpRunning)) && tmp___0 == 0) && \result == 0) && pumpRunning == 0)) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) && ((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || (((!(0 == tmp) && pumpRunning == \old(pumpRunning)) && tmp___0 == 0) && \result == 0)) [2021-12-17 15:07:50,332 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:07:50,332 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:07:50,333 INFO L158 Benchmark]: Toolchain (without parser) took 9430.10ms. Allocated memory was 100.7MB in the beginning and 186.6MB in the end (delta: 86.0MB). Free memory was 68.0MB in the beginning and 97.3MB in the end (delta: -29.3MB). Peak memory consumption was 56.3MB. Max. memory is 16.1GB. [2021-12-17 15:07:50,333 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 83.9MB. Free memory was 55.1MB in the beginning and 55.0MB in the end (delta: 27.6kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:07:50,333 INFO L158 Benchmark]: CACSL2BoogieTranslator took 363.12ms. Allocated memory is still 100.7MB. Free memory was 67.7MB in the beginning and 68.5MB in the end (delta: -790.2kB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2021-12-17 15:07:50,333 INFO L158 Benchmark]: Boogie Procedure Inliner took 56.49ms. Allocated memory is still 100.7MB. Free memory was 68.5MB in the beginning and 66.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:07:50,333 INFO L158 Benchmark]: Boogie Preprocessor took 42.82ms. Allocated memory is still 100.7MB. Free memory was 66.4MB in the beginning and 64.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:07:50,334 INFO L158 Benchmark]: RCFGBuilder took 421.72ms. Allocated memory is still 100.7MB. Free memory was 64.8MB in the beginning and 48.0MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-17 15:07:50,334 INFO L158 Benchmark]: TraceAbstraction took 8466.79ms. Allocated memory was 100.7MB in the beginning and 186.6MB in the end (delta: 86.0MB). Free memory was 47.5MB in the beginning and 103.6MB in the end (delta: -56.0MB). Peak memory consumption was 79.6MB. Max. memory is 16.1GB. [2021-12-17 15:07:50,334 INFO L158 Benchmark]: Witness Printer took 74.35ms. Allocated memory is still 186.6MB. Free memory was 103.6MB in the beginning and 97.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-17 15:07:50,336 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 83.9MB. Free memory was 55.1MB in the beginning and 55.0MB in the end (delta: 27.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 363.12ms. Allocated memory is still 100.7MB. Free memory was 67.7MB in the beginning and 68.5MB in the end (delta: -790.2kB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 56.49ms. Allocated memory is still 100.7MB. Free memory was 68.5MB in the beginning and 66.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 42.82ms. Allocated memory is still 100.7MB. Free memory was 66.4MB in the beginning and 64.8MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 421.72ms. Allocated memory is still 100.7MB. Free memory was 64.8MB in the beginning and 48.0MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 8466.79ms. Allocated memory was 100.7MB in the beginning and 186.6MB in the end (delta: 86.0MB). Free memory was 47.5MB in the beginning and 103.6MB in the end (delta: -56.0MB). Peak memory consumption was 79.6MB. Max. memory is 16.1GB. * Witness Printer took 74.35ms. Allocated memory is still 186.6MB. Free memory was 103.6MB in the beginning and 97.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 895]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 103 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.3s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1377 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1350 mSDsluCounter, 4394 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3089 mSDsCounter, 384 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1620 IncrementalHoareTripleChecker+Invalid, 2004 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 384 mSolverCounterUnsat, 1305 mSDtfsCounter, 1620 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 346 GetRequests, 255 SyntacticMatches, 0 SemanticMatches, 91 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 84 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1246occurred in iteration=8, InterpolantAutomatonStates: 74, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 10 MinimizatonAttempts, 126 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 47 LocationsWithAnnotation, 2684 PreInvPairs, 3173 NumberOfFragments, 1943 HoareAnnotationTreeSize, 2684 FomulaSimplifications, 412 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 47 FomulaSimplificationsInter, 21859 FormulaSimplificationTreeSizeReductionInter, 3.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 687 NumberOfCodeBlocks, 687 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 675 ConstructedInterpolants, 0 QuantifiedInterpolants, 1275 SizeOfPredicates, 6 NumberOfNonLiveVariables, 908 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 12 InterpolantComputations, 10 PerfectInterpolantSequences, 100/105 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((0 == systemActive || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && (((0 == systemActive || ((methaneLevelCritical <= tmp && 2 <= waterLevel) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 353]: Loop Invariant Derived loop invariant: ((0 == systemActive || 2 <= waterLevel) || !(methaneLevelCritical == 0)) && ((0 == systemActive || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || (!(\result == 0) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) && (((0 == systemActive || ((!(\result == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 911]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 495]: Loop Invariant Derived loop invariant: ((((((((((((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0)) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && ((!(1 <= methaneLevelCritical) || pumpRunning == \old(pumpRunning)) || !(\old(pumpRunning) == 0))) && (((0 == systemActive || ((1 <= tmp && !(0 == systemActive)) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && !(0 == systemActive)) && pumpRunning == 0))) && ((((0 == systemActive || (((tmp == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && !(0 == systemActive))) || (tmp == 0 && pumpRunning == \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (tmp == 0 && pumpRunning == 0))) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel)) && (((!(2 <= \old(waterLevel)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: (((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= methaneLevelCritical) && pumpRunning == 0)) || ((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && !(0 == systemActive)) - InvariantResult [Line: 461]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && pumpRunning == 0) || ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= methaneLevelCritical) && pumpRunning == 0) - InvariantResult [Line: 891]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (0 == systemActive || !(1 <= methaneLevelCritical))) && (!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0))) && (0 == systemActive || !(methaneLevelCritical == 0)) - InvariantResult [Line: 476]: Loop Invariant Derived loop invariant: ((((splverifierCounter == 0 && 1 == tmp) && 1 == \result) && 1 <= methaneLevelCritical) && systemActive == 1) || ((((splverifierCounter == 0 && 1 == tmp) && methaneLevelCritical == 0) && 1 == \result) && systemActive == 1) - InvariantResult [Line: 397]: Loop Invariant Derived loop invariant: (((((((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) && (((\result == 0 && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0))) && (0 == systemActive || !(methaneLevelCritical == 0))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel)) && (((0 == systemActive || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || ((\result == 0 && 1 <= tmp) && pumpRunning == 0)) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 328]: Loop Invariant Derived loop invariant: (((((((((!(2 <= \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0))) && (((!(\old(waterLevel) == 1) || waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((0 == systemActive || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0)) || (1 <= tmp && pumpRunning == 0))) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || (((pumpRunning == \old(pumpRunning) && 1 <= methaneLevelCritical) && !(0 == systemActive)) && pumpRunning == 0))) && (((!(2 <= \old(waterLevel)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || 2 <= waterLevel)) && ((((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0)) || pumpRunning == 0) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && !(0 == systemActive))) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0))) && ((0 == systemActive || pumpRunning == \old(pumpRunning)) || !(methaneLevelCritical == 0))) && ((0 == systemActive || !(1 <= methaneLevelCritical)) || pumpRunning == \old(pumpRunning)) - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: (((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 901]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: ((((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 487]: Loop Invariant Derived loop invariant: ((((waterLevel == 1 && methaneLevelCritical == 0) && 1 == \result) && systemActive == tmp) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: (((0 == systemActive || ((((!(0 == tmp) && pumpRunning == \old(pumpRunning)) && tmp___0 == 0) && \result == 0) && pumpRunning == 0)) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) && ((((0 == systemActive || (2 <= waterLevel && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || (((!(0 == tmp) && pumpRunning == \old(pumpRunning)) && tmp___0 == 0) && \result == 0)) RESULT: Ultimate proved your program to be correct! [2021-12-17 15:07:50,403 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE