./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-17 15:07:53,499 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-17 15:07:53,502 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-17 15:07:53,548 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-17 15:07:53,548 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-17 15:07:53,552 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-17 15:07:53,553 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-17 15:07:53,555 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-17 15:07:53,557 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-17 15:07:53,561 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-17 15:07:53,561 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-17 15:07:53,563 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-17 15:07:53,563 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-17 15:07:53,565 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-17 15:07:53,566 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-17 15:07:53,570 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-17 15:07:53,571 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-17 15:07:53,572 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-17 15:07:53,573 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-17 15:07:53,579 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-17 15:07:53,580 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-17 15:07:53,584 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-17 15:07:53,585 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-17 15:07:53,586 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-17 15:07:53,592 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-17 15:07:53,592 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-17 15:07:53,593 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-17 15:07:53,594 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-17 15:07:53,595 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-17 15:07:53,596 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-17 15:07:53,596 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-17 15:07:53,597 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-17 15:07:53,598 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-17 15:07:53,599 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-17 15:07:53,600 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-17 15:07:53,600 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-17 15:07:53,601 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-17 15:07:53,601 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-17 15:07:53,601 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-17 15:07:53,602 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-17 15:07:53,603 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-17 15:07:53,604 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-17 15:07:53,638 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-17 15:07:53,638 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-17 15:07:53,639 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-17 15:07:53,639 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-17 15:07:53,640 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-17 15:07:53,640 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-17 15:07:53,641 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-17 15:07:53,641 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-17 15:07:53,641 INFO L138 SettingsManager]: * Use SBE=true [2021-12-17 15:07:53,641 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-17 15:07:53,642 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-17 15:07:53,642 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-17 15:07:53,642 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-17 15:07:53,643 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-17 15:07:53,643 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-17 15:07:53,643 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-17 15:07:53,643 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-17 15:07:53,643 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-17 15:07:53,644 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-17 15:07:53,644 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-17 15:07:53,644 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-17 15:07:53,644 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-17 15:07:53,644 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-17 15:07:53,645 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-17 15:07:53,645 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:07:53,645 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-17 15:07:53,645 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-17 15:07:53,646 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-17 15:07:53,647 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-17 15:07:53,647 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-17 15:07:53,647 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-17 15:07:53,647 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-17 15:07:53,647 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-17 15:07:53,648 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-17 15:07:53,648 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bff509ff7af2b9788fd6216f7196709183d48c973cf9a066c9793f96467b2abf [2021-12-17 15:07:53,912 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-17 15:07:53,939 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-17 15:07:53,942 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-17 15:07:53,942 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-17 15:07:53,943 INFO L275 PluginConnector]: CDTParser initialized [2021-12-17 15:07:53,944 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2021-12-17 15:07:54,008 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7dc857c0f/d575a4c346bf4c6db768c5c214fa7851/FLAGffccfc7ad [2021-12-17 15:07:54,503 INFO L306 CDTParser]: Found 1 translation units. [2021-12-17 15:07:54,503 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c [2021-12-17 15:07:54,524 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7dc857c0f/d575a4c346bf4c6db768c5c214fa7851/FLAGffccfc7ad [2021-12-17 15:07:54,985 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7dc857c0f/d575a4c346bf4c6db768c5c214fa7851 [2021-12-17 15:07:54,988 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-17 15:07:54,989 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-17 15:07:54,992 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-17 15:07:54,993 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-17 15:07:54,996 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-17 15:07:54,997 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:07:54" (1/1) ... [2021-12-17 15:07:54,998 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@64525b95 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:54, skipping insertion in model container [2021-12-17 15:07:54,998 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.12 03:07:54" (1/1) ... [2021-12-17 15:07:55,003 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-17 15:07:55,056 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-17 15:07:55,296 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2021-12-17 15:07:55,434 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:07:55,446 INFO L203 MainTranslator]: Completed pre-run [2021-12-17 15:07:55,477 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product63.cil.c[2985,2998] [2021-12-17 15:07:55,539 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-17 15:07:55,561 INFO L208 MainTranslator]: Completed translation [2021-12-17 15:07:55,562 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:55 WrapperNode [2021-12-17 15:07:55,562 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-17 15:07:55,563 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-17 15:07:55,564 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-17 15:07:55,564 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-17 15:07:55,570 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:55" (1/1) ... [2021-12-17 15:07:55,599 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:55" (1/1) ... [2021-12-17 15:07:55,640 INFO L137 Inliner]: procedures = 59, calls = 163, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 281 [2021-12-17 15:07:55,640 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-17 15:07:55,641 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-17 15:07:55,641 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-17 15:07:55,642 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-17 15:07:55,649 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:55" (1/1) ... [2021-12-17 15:07:55,649 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:55" (1/1) ... [2021-12-17 15:07:55,656 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:55" (1/1) ... [2021-12-17 15:07:55,657 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:55" (1/1) ... [2021-12-17 15:07:55,668 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:55" (1/1) ... [2021-12-17 15:07:55,672 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:55" (1/1) ... [2021-12-17 15:07:55,674 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:55" (1/1) ... [2021-12-17 15:07:55,676 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-17 15:07:55,677 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-17 15:07:55,677 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-17 15:07:55,677 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-17 15:07:55,678 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:55" (1/1) ... [2021-12-17 15:07:55,684 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-17 15:07:55,693 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:07:55,750 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-17 15:07:55,774 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-17 15:07:55,788 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-17 15:07:55,788 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-17 15:07:55,789 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-17 15:07:55,789 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-17 15:07:55,789 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-17 15:07:55,789 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-17 15:07:55,789 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-17 15:07:55,789 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-17 15:07:55,790 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-17 15:07:55,790 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:07:55,790 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:07:55,790 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-17 15:07:55,790 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-17 15:07:55,790 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:07:55,790 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:07:55,791 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-17 15:07:55,791 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-17 15:07:55,791 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2021-12-17 15:07:55,791 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2021-12-17 15:07:55,791 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-17 15:07:55,791 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-17 15:07:55,791 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-17 15:07:55,792 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-17 15:07:55,792 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-17 15:07:55,876 INFO L236 CfgBuilder]: Building ICFG [2021-12-17 15:07:55,877 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-17 15:07:56,166 INFO L277 CfgBuilder]: Performing block encoding [2021-12-17 15:07:56,173 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-17 15:07:56,174 INFO L301 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-17 15:07:56,176 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:07:56 BoogieIcfgContainer [2021-12-17 15:07:56,176 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-17 15:07:56,177 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-17 15:07:56,177 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-17 15:07:56,180 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-17 15:07:56,181 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.12 03:07:54" (1/3) ... [2021-12-17 15:07:56,181 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@24713c02 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:07:56, skipping insertion in model container [2021-12-17 15:07:56,181 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.12 03:07:55" (2/3) ... [2021-12-17 15:07:56,182 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@24713c02 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.12 03:07:56, skipping insertion in model container [2021-12-17 15:07:56,182 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:07:56" (3/3) ... [2021-12-17 15:07:56,183 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product63.cil.c [2021-12-17 15:07:56,187 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-17 15:07:56,188 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-17 15:07:56,225 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-17 15:07:56,231 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-17 15:07:56,232 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-17 15:07:56,257 INFO L276 IsEmpty]: Start isEmpty. Operand has 114 states, 83 states have (on average 1.3734939759036144) internal successors, (114), 94 states have internal predecessors, (114), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2021-12-17 15:07:56,263 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-17 15:07:56,264 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:56,264 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:56,265 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:56,270 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:56,270 INFO L85 PathProgramCache]: Analyzing trace with hash -1947167556, now seen corresponding path program 1 times [2021-12-17 15:07:56,277 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:56,278 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [982026738] [2021-12-17 15:07:56,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:56,279 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:56,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:56,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-17 15:07:56,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:56,532 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:56,533 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:56,534 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [982026738] [2021-12-17 15:07:56,535 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [982026738] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:56,536 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:56,536 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-17 15:07:56,537 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [833828499] [2021-12-17 15:07:56,538 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:56,542 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-17 15:07:56,542 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:56,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-17 15:07:56,572 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:07:56,575 INFO L87 Difference]: Start difference. First operand has 114 states, 83 states have (on average 1.3734939759036144) internal successors, (114), 94 states have internal predecessors, (114), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:56,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:56,632 INFO L93 Difference]: Finished difference Result 219 states and 298 transitions. [2021-12-17 15:07:56,633 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-17 15:07:56,634 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-17 15:07:56,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:56,645 INFO L225 Difference]: With dead ends: 219 [2021-12-17 15:07:56,645 INFO L226 Difference]: Without dead ends: 105 [2021-12-17 15:07:56,650 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-17 15:07:56,653 INFO L933 BasicCegarLoop]: 146 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:56,654 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:56,668 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2021-12-17 15:07:56,700 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 105. [2021-12-17 15:07:56,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 76 states have (on average 1.3157894736842106) internal successors, (100), 86 states have internal predecessors, (100), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2021-12-17 15:07:56,707 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 137 transitions. [2021-12-17 15:07:56,709 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 137 transitions. Word has length 25 [2021-12-17 15:07:56,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:56,710 INFO L470 AbstractCegarLoop]: Abstraction has 105 states and 137 transitions. [2021-12-17 15:07:56,710 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:56,711 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 137 transitions. [2021-12-17 15:07:56,716 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-17 15:07:56,717 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:56,717 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:56,717 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-17 15:07:56,718 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:56,721 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:56,721 INFO L85 PathProgramCache]: Analyzing trace with hash -1638616570, now seen corresponding path program 1 times [2021-12-17 15:07:56,722 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:56,722 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1838100336] [2021-12-17 15:07:56,722 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:56,722 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:56,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:56,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-17 15:07:56,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:56,830 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:56,831 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:56,831 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1838100336] [2021-12-17 15:07:56,831 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1838100336] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:56,832 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:56,832 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:07:56,832 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [641694269] [2021-12-17 15:07:56,832 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:56,833 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:07:56,834 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:56,834 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:07:56,834 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:56,835 INFO L87 Difference]: Start difference. First operand 105 states and 137 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:56,856 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:56,859 INFO L93 Difference]: Finished difference Result 171 states and 223 transitions. [2021-12-17 15:07:56,860 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:07:56,861 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-17 15:07:56,861 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:56,864 INFO L225 Difference]: With dead ends: 171 [2021-12-17 15:07:56,864 INFO L226 Difference]: Without dead ends: 96 [2021-12-17 15:07:56,875 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:56,877 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 16 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 227 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:56,878 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 227 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:56,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2021-12-17 15:07:56,890 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2021-12-17 15:07:56,895 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 70 states have (on average 1.3285714285714285) internal successors, (93), 80 states have internal predecessors, (93), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2021-12-17 15:07:56,896 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 125 transitions. [2021-12-17 15:07:56,897 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 125 transitions. Word has length 26 [2021-12-17 15:07:56,897 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:56,898 INFO L470 AbstractCegarLoop]: Abstraction has 96 states and 125 transitions. [2021-12-17 15:07:56,898 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:56,899 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 125 transitions. [2021-12-17 15:07:56,904 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-17 15:07:56,904 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:56,904 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:56,904 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-17 15:07:56,905 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:56,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:56,906 INFO L85 PathProgramCache]: Analyzing trace with hash 1033007084, now seen corresponding path program 1 times [2021-12-17 15:07:56,906 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:56,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [520025240] [2021-12-17 15:07:56,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:56,907 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:56,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:56,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:07:56,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:56,998 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:56,999 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:56,999 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [520025240] [2021-12-17 15:07:56,999 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [520025240] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:57,000 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:57,000 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-17 15:07:57,001 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2104747894] [2021-12-17 15:07:57,001 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:57,001 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-17 15:07:57,002 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:57,002 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-17 15:07:57,003 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:57,003 INFO L87 Difference]: Start difference. First operand 96 states and 125 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:57,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:57,048 INFO L93 Difference]: Finished difference Result 271 states and 359 transitions. [2021-12-17 15:07:57,049 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-17 15:07:57,049 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2021-12-17 15:07:57,049 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:57,051 INFO L225 Difference]: With dead ends: 271 [2021-12-17 15:07:57,053 INFO L226 Difference]: Without dead ends: 183 [2021-12-17 15:07:57,054 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-17 15:07:57,056 INFO L933 BasicCegarLoop]: 158 mSDtfsCounter, 104 mSDsluCounter, 114 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 272 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:57,057 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [104 Valid, 272 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-17 15:07:57,058 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2021-12-17 15:07:57,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 180. [2021-12-17 15:07:57,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 180 states, 129 states have (on average 1.3488372093023255) internal successors, (174), 148 states have internal predecessors, (174), 32 states have call successors, (32), 18 states have call predecessors, (32), 18 states have return successors, (32), 21 states have call predecessors, (32), 32 states have call successors, (32) [2021-12-17 15:07:57,084 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 180 states to 180 states and 238 transitions. [2021-12-17 15:07:57,084 INFO L78 Accepts]: Start accepts. Automaton has 180 states and 238 transitions. Word has length 30 [2021-12-17 15:07:57,084 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:57,085 INFO L470 AbstractCegarLoop]: Abstraction has 180 states and 238 transitions. [2021-12-17 15:07:57,085 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:57,085 INFO L276 IsEmpty]: Start isEmpty. Operand 180 states and 238 transitions. [2021-12-17 15:07:57,086 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2021-12-17 15:07:57,086 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:57,087 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:57,087 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-17 15:07:57,087 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:57,087 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:57,088 INFO L85 PathProgramCache]: Analyzing trace with hash -1394669962, now seen corresponding path program 1 times [2021-12-17 15:07:57,088 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:57,088 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2034482371] [2021-12-17 15:07:57,088 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:57,088 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:57,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:57,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:07:57,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:57,213 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:57,214 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:57,214 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2034482371] [2021-12-17 15:07:57,214 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2034482371] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:57,215 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:57,215 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:57,215 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [655643192] [2021-12-17 15:07:57,215 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:57,216 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:57,216 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:57,216 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:57,216 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:57,217 INFO L87 Difference]: Start difference. First operand 180 states and 238 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:57,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:57,354 INFO L93 Difference]: Finished difference Result 522 states and 699 transitions. [2021-12-17 15:07:57,355 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:07:57,355 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2021-12-17 15:07:57,356 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:57,358 INFO L225 Difference]: With dead ends: 522 [2021-12-17 15:07:57,359 INFO L226 Difference]: Without dead ends: 350 [2021-12-17 15:07:57,359 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:07:57,360 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 93 mSDsluCounter, 485 mSDsCounter, 0 mSdLazyCounter, 58 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 623 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 58 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:57,361 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [96 Valid, 623 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 58 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:07:57,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 350 states. [2021-12-17 15:07:57,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 350 to 344. [2021-12-17 15:07:57,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 344 states, 243 states have (on average 1.337448559670782) internal successors, (325), 280 states have internal predecessors, (325), 64 states have call successors, (64), 36 states have call predecessors, (64), 36 states have return successors, (66), 42 states have call predecessors, (66), 64 states have call successors, (66) [2021-12-17 15:07:57,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 344 states to 344 states and 455 transitions. [2021-12-17 15:07:57,409 INFO L78 Accepts]: Start accepts. Automaton has 344 states and 455 transitions. Word has length 34 [2021-12-17 15:07:57,410 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:57,410 INFO L470 AbstractCegarLoop]: Abstraction has 344 states and 455 transitions. [2021-12-17 15:07:57,410 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-17 15:07:57,411 INFO L276 IsEmpty]: Start isEmpty. Operand 344 states and 455 transitions. [2021-12-17 15:07:57,414 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2021-12-17 15:07:57,415 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:57,415 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:57,415 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-17 15:07:57,415 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:57,416 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:57,416 INFO L85 PathProgramCache]: Analyzing trace with hash -256503566, now seen corresponding path program 1 times [2021-12-17 15:07:57,416 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:57,416 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [382257006] [2021-12-17 15:07:57,416 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:57,417 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:57,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:57,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:07:57,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:57,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:07:57,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:57,497 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:07:57,498 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:57,498 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [382257006] [2021-12-17 15:07:57,498 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [382257006] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:57,498 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:57,498 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:57,498 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [818646387] [2021-12-17 15:07:57,499 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:57,499 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:57,499 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:57,500 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:57,500 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:57,500 INFO L87 Difference]: Start difference. First operand 344 states and 455 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:07:57,869 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:57,869 INFO L93 Difference]: Finished difference Result 892 states and 1200 transitions. [2021-12-17 15:07:57,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:07:57,870 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2021-12-17 15:07:57,870 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:57,879 INFO L225 Difference]: With dead ends: 892 [2021-12-17 15:07:57,879 INFO L226 Difference]: Without dead ends: 556 [2021-12-17 15:07:57,881 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2021-12-17 15:07:57,886 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 147 mSDsluCounter, 162 mSDsCounter, 0 mSdLazyCounter, 270 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 273 SdHoareTripleChecker+Invalid, 330 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 270 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:57,887 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [156 Valid, 273 Invalid, 330 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 270 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-17 15:07:57,890 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 556 states. [2021-12-17 15:07:57,941 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 556 to 542. [2021-12-17 15:07:57,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 542 states, 389 states have (on average 1.2776349614395888) internal successors, (497), 426 states have internal predecessors, (497), 84 states have call successors, (84), 68 states have call predecessors, (84), 68 states have return successors, (112), 74 states have call predecessors, (112), 84 states have call successors, (112) [2021-12-17 15:07:57,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 542 states to 542 states and 693 transitions. [2021-12-17 15:07:57,946 INFO L78 Accepts]: Start accepts. Automaton has 542 states and 693 transitions. Word has length 38 [2021-12-17 15:07:57,946 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:57,946 INFO L470 AbstractCegarLoop]: Abstraction has 542 states and 693 transitions. [2021-12-17 15:07:57,947 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2021-12-17 15:07:57,947 INFO L276 IsEmpty]: Start isEmpty. Operand 542 states and 693 transitions. [2021-12-17 15:07:57,948 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-17 15:07:57,948 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:57,949 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:57,949 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-17 15:07:57,949 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:57,949 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:57,950 INFO L85 PathProgramCache]: Analyzing trace with hash -843319069, now seen corresponding path program 1 times [2021-12-17 15:07:57,950 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:57,950 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1253406596] [2021-12-17 15:07:57,950 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:57,950 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:57,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:57,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:07:57,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:57,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:07:57,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:58,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:58,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:07:58,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-17 15:07:58,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,071 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:07:58,071 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:58,071 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1253406596] [2021-12-17 15:07:58,072 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1253406596] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:58,072 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:58,072 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-17 15:07:58,072 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [550614470] [2021-12-17 15:07:58,072 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:58,073 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-17 15:07:58,073 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:58,073 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-17 15:07:58,074 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-17 15:07:58,074 INFO L87 Difference]: Start difference. First operand 542 states and 693 transitions. Second operand has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-17 15:07:58,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:58,423 INFO L93 Difference]: Finished difference Result 1208 states and 1589 transitions. [2021-12-17 15:07:58,424 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-17 15:07:58,424 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2021-12-17 15:07:58,424 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:58,428 INFO L225 Difference]: With dead ends: 1208 [2021-12-17 15:07:58,429 INFO L226 Difference]: Without dead ends: 674 [2021-12-17 15:07:58,431 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-17 15:07:58,431 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 159 mSDsluCounter, 183 mSDsCounter, 0 mSdLazyCounter, 325 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 160 SdHoareTripleChecker+Valid, 285 SdHoareTripleChecker+Invalid, 397 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 325 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:58,432 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [160 Valid, 285 Invalid, 397 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 325 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:07:58,433 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 674 states. [2021-12-17 15:07:58,465 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 674 to 652. [2021-12-17 15:07:58,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 652 states, 471 states have (on average 1.246284501061571) internal successors, (587), 508 states have internal predecessors, (587), 92 states have call successors, (92), 68 states have call predecessors, (92), 88 states have return successors, (140), 98 states have call predecessors, (140), 92 states have call successors, (140) [2021-12-17 15:07:58,470 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 652 states to 652 states and 819 transitions. [2021-12-17 15:07:58,470 INFO L78 Accepts]: Start accepts. Automaton has 652 states and 819 transitions. Word has length 65 [2021-12-17 15:07:58,471 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:58,471 INFO L470 AbstractCegarLoop]: Abstraction has 652 states and 819 transitions. [2021-12-17 15:07:58,471 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-17 15:07:58,471 INFO L276 IsEmpty]: Start isEmpty. Operand 652 states and 819 transitions. [2021-12-17 15:07:58,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-17 15:07:58,473 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:58,473 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:58,473 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-17 15:07:58,473 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:58,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:58,474 INFO L85 PathProgramCache]: Analyzing trace with hash -915705627, now seen corresponding path program 1 times [2021-12-17 15:07:58,474 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:58,474 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1288561157] [2021-12-17 15:07:58,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:58,474 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:58,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:07:58,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:07:58,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:58,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:58,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:07:58,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-17 15:07:58,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,556 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:07:58,557 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:58,557 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1288561157] [2021-12-17 15:07:58,557 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1288561157] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:58,557 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:58,557 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:58,557 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1585200381] [2021-12-17 15:07:58,557 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:58,558 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:58,558 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:58,558 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:58,558 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:58,559 INFO L87 Difference]: Start difference. First operand 652 states and 819 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-17 15:07:58,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:58,788 INFO L93 Difference]: Finished difference Result 1330 states and 1723 transitions. [2021-12-17 15:07:58,791 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-17 15:07:58,791 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2021-12-17 15:07:58,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:58,796 INFO L225 Difference]: With dead ends: 1330 [2021-12-17 15:07:58,796 INFO L226 Difference]: Without dead ends: 686 [2021-12-17 15:07:58,798 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2021-12-17 15:07:58,799 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 160 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 243 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 242 SdHoareTripleChecker+Invalid, 308 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 243 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:58,799 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [161 Valid, 242 Invalid, 308 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 243 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-17 15:07:58,809 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 686 states. [2021-12-17 15:07:58,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 686 to 660. [2021-12-17 15:07:58,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 660 states, 479 states have (on average 1.2421711899791232) internal successors, (595), 516 states have internal predecessors, (595), 92 states have call successors, (92), 68 states have call predecessors, (92), 88 states have return successors, (140), 98 states have call predecessors, (140), 92 states have call successors, (140) [2021-12-17 15:07:58,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 660 states to 660 states and 827 transitions. [2021-12-17 15:07:58,844 INFO L78 Accepts]: Start accepts. Automaton has 660 states and 827 transitions. Word has length 65 [2021-12-17 15:07:58,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:58,844 INFO L470 AbstractCegarLoop]: Abstraction has 660 states and 827 transitions. [2021-12-17 15:07:58,845 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 4 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-12-17 15:07:58,845 INFO L276 IsEmpty]: Start isEmpty. Operand 660 states and 827 transitions. [2021-12-17 15:07:58,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2021-12-17 15:07:58,846 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:58,846 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:58,847 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-17 15:07:58,847 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:58,847 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:58,847 INFO L85 PathProgramCache]: Analyzing trace with hash -1759711129, now seen corresponding path program 1 times [2021-12-17 15:07:58,848 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:58,848 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [89640032] [2021-12-17 15:07:58,848 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:58,848 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:58,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-17 15:07:58,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:07:58,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:58,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:58,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:07:58,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2021-12-17 15:07:58,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:58,922 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-17 15:07:58,922 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:58,922 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [89640032] [2021-12-17 15:07:58,923 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [89640032] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:07:58,923 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:07:58,923 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-17 15:07:58,923 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [444783426] [2021-12-17 15:07:58,923 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:07:58,924 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-17 15:07:58,924 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:07:58,924 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-17 15:07:58,924 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-17 15:07:58,925 INFO L87 Difference]: Start difference. First operand 660 states and 827 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 4 states have internal predecessors, (50), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 4 states have call successors, (6) [2021-12-17 15:07:59,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:07:59,299 INFO L93 Difference]: Finished difference Result 1838 states and 2399 transitions. [2021-12-17 15:07:59,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-17 15:07:59,300 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 4 states have internal predecessors, (50), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 4 states have call successors, (6) Word has length 65 [2021-12-17 15:07:59,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:07:59,306 INFO L225 Difference]: With dead ends: 1838 [2021-12-17 15:07:59,306 INFO L226 Difference]: Without dead ends: 1186 [2021-12-17 15:07:59,308 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 17 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-17 15:07:59,309 INFO L933 BasicCegarLoop]: 154 mSDtfsCounter, 374 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 312 mSolverCounterSat, 164 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 377 SdHoareTripleChecker+Valid, 301 SdHoareTripleChecker+Invalid, 476 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 164 IncrementalHoareTripleChecker+Valid, 312 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-17 15:07:59,309 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [377 Valid, 301 Invalid, 476 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [164 Valid, 312 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-17 15:07:59,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1186 states. [2021-12-17 15:07:59,355 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1186 to 1174. [2021-12-17 15:07:59,357 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1174 states, 857 states have (on average 1.2147024504084014) internal successors, (1041), 912 states have internal predecessors, (1041), 162 states have call successors, (162), 142 states have call predecessors, (162), 154 states have return successors, (276), 164 states have call predecessors, (276), 162 states have call successors, (276) [2021-12-17 15:07:59,362 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1174 states to 1174 states and 1479 transitions. [2021-12-17 15:07:59,362 INFO L78 Accepts]: Start accepts. Automaton has 1174 states and 1479 transitions. Word has length 65 [2021-12-17 15:07:59,362 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:07:59,362 INFO L470 AbstractCegarLoop]: Abstraction has 1174 states and 1479 transitions. [2021-12-17 15:07:59,363 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 4 states have internal predecessors, (50), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 4 states have call predecessors, (6), 4 states have call successors, (6) [2021-12-17 15:07:59,363 INFO L276 IsEmpty]: Start isEmpty. Operand 1174 states and 1479 transitions. [2021-12-17 15:07:59,364 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-12-17 15:07:59,365 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:07:59,365 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:07:59,365 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-17 15:07:59,365 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:07:59,366 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:07:59,366 INFO L85 PathProgramCache]: Analyzing trace with hash -38227251, now seen corresponding path program 1 times [2021-12-17 15:07:59,366 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:07:59,366 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [325093544] [2021-12-17 15:07:59,366 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:59,367 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:07:59,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:59,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:07:59,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:59,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-17 15:07:59,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:59,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-17 15:07:59,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:59,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:07:59,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:59,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:07:59,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:59,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:07:59,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:59,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2021-12-17 15:07:59,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:59,614 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-17 15:07:59,614 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:07:59,614 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [325093544] [2021-12-17 15:07:59,615 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [325093544] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:07:59,615 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2101992055] [2021-12-17 15:07:59,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:07:59,615 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:07:59,615 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:07:59,619 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:07:59,645 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-17 15:07:59,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:07:59,714 INFO L263 TraceCheckSpWp]: Trace formula consists of 401 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-17 15:07:59,720 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:08:00,093 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-17 15:08:00,093 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-17 15:08:00,094 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2101992055] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:08:00,094 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-17 15:08:00,094 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2021-12-17 15:08:00,095 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1603454959] [2021-12-17 15:08:00,095 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:08:00,096 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-17 15:08:00,096 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:08:00,096 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-17 15:08:00,097 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=364, Unknown=0, NotChecked=0, Total=420 [2021-12-17 15:08:00,097 INFO L87 Difference]: Start difference. First operand 1174 states and 1479 transitions. Second operand has 8 states, 8 states have (on average 6.75) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2021-12-17 15:08:00,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:08:00,279 INFO L93 Difference]: Finished difference Result 2292 states and 2902 transitions. [2021-12-17 15:08:00,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:08:00,281 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.75) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) Word has length 69 [2021-12-17 15:08:00,282 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:08:00,288 INFO L225 Difference]: With dead ends: 2292 [2021-12-17 15:08:00,288 INFO L226 Difference]: Without dead ends: 1126 [2021-12-17 15:08:00,294 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 72 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=56, Invalid=364, Unknown=0, NotChecked=0, Total=420 [2021-12-17 15:08:00,296 INFO L933 BasicCegarLoop]: 228 mSDtfsCounter, 85 mSDsluCounter, 830 mSDsCounter, 0 mSdLazyCounter, 215 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 1058 SdHoareTripleChecker+Invalid, 218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 215 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:08:00,296 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [89 Valid, 1058 Invalid, 218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 215 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:08:00,298 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1126 states. [2021-12-17 15:08:00,369 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1126 to 1122. [2021-12-17 15:08:00,371 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1122 states, 817 states have (on average 1.200734394124847) internal successors, (981), 870 states have internal predecessors, (981), 158 states have call successors, (158), 138 states have call predecessors, (158), 146 states have return successors, (242), 156 states have call predecessors, (242), 158 states have call successors, (242) [2021-12-17 15:08:00,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1122 states to 1122 states and 1381 transitions. [2021-12-17 15:08:00,377 INFO L78 Accepts]: Start accepts. Automaton has 1122 states and 1381 transitions. Word has length 69 [2021-12-17 15:08:00,378 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:08:00,378 INFO L470 AbstractCegarLoop]: Abstraction has 1122 states and 1381 transitions. [2021-12-17 15:08:00,378 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.75) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2021-12-17 15:08:00,378 INFO L276 IsEmpty]: Start isEmpty. Operand 1122 states and 1381 transitions. [2021-12-17 15:08:00,381 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2021-12-17 15:08:00,381 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:08:00,382 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:08:00,411 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-17 15:08:00,607 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:08:00,607 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:08:00,608 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:08:00,608 INFO L85 PathProgramCache]: Analyzing trace with hash -422564999, now seen corresponding path program 1 times [2021-12-17 15:08:00,608 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:08:00,608 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [497114557] [2021-12-17 15:08:00,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:08:00,609 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:08:00,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:00,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:08:00,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:00,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-17 15:08:00,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:00,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:08:00,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:00,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:08:00,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:00,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:08:00,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:00,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:08:00,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:00,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-17 15:08:00,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:00,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2021-12-17 15:08:00,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:00,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2021-12-17 15:08:00,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:00,725 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:08:00,726 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:08:00,726 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [497114557] [2021-12-17 15:08:00,726 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [497114557] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:08:00,726 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-17 15:08:00,726 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-17 15:08:00,726 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1863031033] [2021-12-17 15:08:00,726 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:08:00,727 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-17 15:08:00,727 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:08:00,727 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-17 15:08:00,727 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2021-12-17 15:08:00,727 INFO L87 Difference]: Start difference. First operand 1122 states and 1381 transitions. Second operand has 8 states, 8 states have (on average 9.125) internal successors, (73), 4 states have internal predecessors, (73), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2021-12-17 15:08:01,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:08:01,190 INFO L93 Difference]: Finished difference Result 1455 states and 1799 transitions. [2021-12-17 15:08:01,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-12-17 15:08:01,190 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.125) internal successors, (73), 4 states have internal predecessors, (73), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) Word has length 96 [2021-12-17 15:08:01,190 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:08:01,194 INFO L225 Difference]: With dead ends: 1455 [2021-12-17 15:08:01,194 INFO L226 Difference]: Without dead ends: 653 [2021-12-17 15:08:01,196 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=86, Invalid=220, Unknown=0, NotChecked=0, Total=306 [2021-12-17 15:08:01,197 INFO L933 BasicCegarLoop]: 138 mSDtfsCounter, 334 mSDsluCounter, 191 mSDsCounter, 0 mSdLazyCounter, 376 mSolverCounterSat, 149 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 343 SdHoareTripleChecker+Valid, 329 SdHoareTripleChecker+Invalid, 525 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 149 IncrementalHoareTripleChecker+Valid, 376 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-12-17 15:08:01,198 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [343 Valid, 329 Invalid, 525 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [149 Valid, 376 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-12-17 15:08:01,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 653 states. [2021-12-17 15:08:01,239 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 653 to 633. [2021-12-17 15:08:01,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 633 states, 460 states have (on average 1.1608695652173913) internal successors, (534), 492 states have internal predecessors, (534), 91 states have call successors, (91), 68 states have call predecessors, (91), 81 states have return successors, (151), 92 states have call predecessors, (151), 91 states have call successors, (151) [2021-12-17 15:08:01,243 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 633 states to 633 states and 776 transitions. [2021-12-17 15:08:01,244 INFO L78 Accepts]: Start accepts. Automaton has 633 states and 776 transitions. Word has length 96 [2021-12-17 15:08:01,244 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:08:01,244 INFO L470 AbstractCegarLoop]: Abstraction has 633 states and 776 transitions. [2021-12-17 15:08:01,244 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.125) internal successors, (73), 4 states have internal predecessors, (73), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2021-12-17 15:08:01,245 INFO L276 IsEmpty]: Start isEmpty. Operand 633 states and 776 transitions. [2021-12-17 15:08:01,247 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2021-12-17 15:08:01,247 INFO L506 BasicCegarLoop]: Found error trace [2021-12-17 15:08:01,248 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:08:01,248 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-12-17 15:08:01,248 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-17 15:08:01,249 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-17 15:08:01,250 INFO L85 PathProgramCache]: Analyzing trace with hash -921698978, now seen corresponding path program 1 times [2021-12-17 15:08:01,250 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-17 15:08:01,250 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1894737326] [2021-12-17 15:08:01,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:08:01,250 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-17 15:08:01,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-17 15:08:01,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-17 15:08:01,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-17 15:08:01,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:08:01,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-17 15:08:01,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:08:01,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-12-17 15:08:01,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2021-12-17 15:08:01,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2021-12-17 15:08:01,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-17 15:08:01,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2021-12-17 15:08:01,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-12-17 15:08:01,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-17 15:08:01,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-12-17 15:08:01,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,466 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2021-12-17 15:08:01,466 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-17 15:08:01,466 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1894737326] [2021-12-17 15:08:01,466 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1894737326] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-17 15:08:01,466 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [797008504] [2021-12-17 15:08:01,467 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-17 15:08:01,467 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-17 15:08:01,467 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-17 15:08:01,468 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-17 15:08:01,496 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-17 15:08:01,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-17 15:08:01,571 INFO L263 TraceCheckSpWp]: Trace formula consists of 536 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-17 15:08:01,575 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-17 15:08:01,837 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-17 15:08:01,837 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-17 15:08:01,837 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [797008504] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-17 15:08:01,838 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-17 15:08:01,838 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2021-12-17 15:08:01,838 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [522518380] [2021-12-17 15:08:01,838 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-17 15:08:01,838 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-17 15:08:01,839 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-17 15:08:01,839 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-17 15:08:01,839 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=293, Unknown=0, NotChecked=0, Total=342 [2021-12-17 15:08:01,839 INFO L87 Difference]: Start difference. First operand 633 states and 776 transitions. Second operand has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-17 15:08:01,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-17 15:08:01,990 INFO L93 Difference]: Finished difference Result 1096 states and 1363 transitions. [2021-12-17 15:08:01,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-17 15:08:01,991 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 123 [2021-12-17 15:08:01,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-17 15:08:01,992 INFO L225 Difference]: With dead ends: 1096 [2021-12-17 15:08:01,992 INFO L226 Difference]: Without dead ends: 0 [2021-12-17 15:08:01,994 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 161 GetRequests, 142 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=359, Unknown=0, NotChecked=0, Total=420 [2021-12-17 15:08:01,995 INFO L933 BasicCegarLoop]: 197 mSDtfsCounter, 73 mSDsluCounter, 991 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 1188 SdHoareTripleChecker+Invalid, 132 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-17 15:08:01,995 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [77 Valid, 1188 Invalid, 132 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-17 15:08:01,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-17 15:08:01,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-17 15:08:01,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-17 15:08:01,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-17 15:08:01,997 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 123 [2021-12-17 15:08:01,997 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-17 15:08:01,997 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-17 15:08:01,997 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 6 states have internal predecessors, (88), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2021-12-17 15:08:01,997 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-17 15:08:01,998 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-17 15:08:02,000 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-17 15:08:02,030 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-17 15:08:02,215 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-17 15:08:02,217 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-17 15:08:06,042 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 521 528) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= ~systemActive~0 1))) (.cse0 (= 0 ~systemActive~0)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse5) (or .cse1 .cse2 .cse5) (or .cse0 .cse4 .cse1 .cse3))) [2021-12-17 15:08:06,042 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 521 528) no Hoare annotation was computed. [2021-12-17 15:08:06,042 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 521 528) no Hoare annotation was computed. [2021-12-17 15:08:06,042 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 411 417) no Hoare annotation was computed. [2021-12-17 15:08:06,042 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 411 417) the Hoare annotation is: true [2021-12-17 15:08:06,043 INFO L854 garLoopResultBuilder]: At program point L459(line 459) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse1))) [2021-12-17 15:08:06,043 INFO L854 garLoopResultBuilder]: At program point L455(line 455) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse1))) [2021-12-17 15:08:06,043 INFO L858 garLoopResultBuilder]: For program point L453(lines 453 461) no Hoare annotation was computed. [2021-12-17 15:08:06,043 INFO L858 garLoopResultBuilder]: For program point L449(lines 449 466) no Hoare annotation was computed. [2021-12-17 15:08:06,043 INFO L854 garLoopResultBuilder]: At program point L309(lines 304 312) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse1))) [2021-12-17 15:08:06,043 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 445 469) the Hoare annotation is: (let ((.cse0 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse0 (= ~pumpRunning~0 0)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-17 15:08:06,043 INFO L854 garLoopResultBuilder]: At program point L464(line 464) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-17 15:08:06,043 INFO L858 garLoopResultBuilder]: For program point L464-1(lines 445 469) no Hoare annotation was computed. [2021-12-17 15:08:06,043 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 445 469) no Hoare annotation was computed. [2021-12-17 15:08:06,043 INFO L854 garLoopResultBuilder]: At program point L619(lines 604 622) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse1))) [2021-12-17 15:08:06,044 INFO L858 garLoopResultBuilder]: For program point L613(lines 613 617) no Hoare annotation was computed. [2021-12-17 15:08:06,044 INFO L858 garLoopResultBuilder]: For program point L613-2(lines 613 617) no Hoare annotation was computed. [2021-12-17 15:08:06,044 INFO L858 garLoopResultBuilder]: For program point L241-1(lines 237 248) no Hoare annotation was computed. [2021-12-17 15:08:06,044 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 237 248) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 |old(~methaneLevelCritical~0)|)) (.cse2 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~systemActive~0 0))) (.cse5 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse4 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse5 .cse0 .cse6 .cse3) (or .cse5 .cse6 .cse4))) [2021-12-17 15:08:06,044 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 237 248) no Hoare annotation was computed. [2021-12-17 15:08:06,044 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 249 257) the Hoare annotation is: true [2021-12-17 15:08:06,044 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 249 257) no Hoare annotation was computed. [2021-12-17 15:08:06,044 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 249 257) no Hoare annotation was computed. [2021-12-17 15:08:06,044 INFO L854 garLoopResultBuilder]: At program point L481(line 481) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~systemActive~0 0))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse1) .cse2) (or .cse0 .cse3 .cse2) (or .cse3 .cse4 .cse2) (or .cse0 .cse3 .cse5) (or .cse3 .cse4 .cse5) (or .cse1 .cse4 .cse2))) [2021-12-17 15:08:06,044 INFO L854 garLoopResultBuilder]: At program point L477(line 477) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~systemActive~0 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2) (or .cse1 .cse3 .cse2) (or .cse0 .cse1 .cse4) (or .cse1 .cse3 .cse4) (or .cse0 .cse5 .cse2) (or .cse5 .cse3 .cse2))) [2021-12-17 15:08:06,044 INFO L858 garLoopResultBuilder]: For program point L477-1(line 477) no Hoare annotation was computed. [2021-12-17 15:08:06,044 INFO L858 garLoopResultBuilder]: For program point L188(lines 188 198) no Hoare annotation was computed. [2021-12-17 15:08:06,045 INFO L858 garLoopResultBuilder]: For program point L217(lines 217 221) no Hoare annotation was computed. [2021-12-17 15:08:06,045 INFO L858 garLoopResultBuilder]: For program point L184(lines 184 201) no Hoare annotation was computed. [2021-12-17 15:08:06,045 INFO L854 garLoopResultBuilder]: At program point L217-2(lines 213 224) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~systemActive~0 0))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2) (or .cse1 .cse3 .cse2) (or .cse0 .cse1 .cse4) (or .cse1 .cse3 .cse4) (or .cse0 .cse5 .cse2) (or .cse5 .cse3 .cse2))) [2021-12-17 15:08:06,045 INFO L854 garLoopResultBuilder]: At program point L184-1(lines 176 204) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse3 (not (= ~systemActive~0 1))) (.cse0 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse3 .cse5) (or (and .cse6 (<= 2 ~waterLevel~0)) (and .cse6 .cse7) (and .cse6 .cse5) .cse2 .cse3) (or .cse1 .cse2 (and .cse6 .cse0 .cse5) .cse8) (or .cse4 .cse0 .cse1 .cse3) (or (and .cse0 .cse7) .cse4 .cse1 .cse8))) [2021-12-17 15:08:06,045 INFO L854 garLoopResultBuilder]: At program point L490(line 490) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= ~waterLevel~0 |old(~waterLevel~0)|) (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse2 (not (= ~systemActive~0 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~systemActive~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4) (or .cse1 .cse5 .cse2) (or .cse3 .cse5 .cse4))) [2021-12-17 15:08:06,045 INFO L854 garLoopResultBuilder]: At program point L490-1(lines 471 495) the Hoare annotation is: (let ((.cse0 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse1 (<= 2 ~waterLevel~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (= ~systemActive~0 0))) (.cse2 (and .cse0 (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~systemActive~0 1)))) (and (or (and .cse0 .cse1) .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse5 .cse7) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse4 .cse5 .cse7) (or .cse6 .cse3 .cse8) (or .cse3 .cse4 .cse8) (or .cse2 .cse6 .cse3 .cse5)))) [2021-12-17 15:08:06,045 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 387 410) no Hoare annotation was computed. [2021-12-17 15:08:06,045 INFO L858 garLoopResultBuilder]: For program point L391-1(lines 390 409) no Hoare annotation was computed. [2021-12-17 15:08:06,045 INFO L858 garLoopResultBuilder]: For program point L160(line 160) no Hoare annotation was computed. [2021-12-17 15:08:06,045 INFO L858 garLoopResultBuilder]: For program point L189(lines 189 195) no Hoare annotation was computed. [2021-12-17 15:08:06,045 INFO L854 garLoopResultBuilder]: At program point L545(lines 540 548) the Hoare annotation is: (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse6 (not (= ~systemActive~0 0))) (.cse8 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse7 (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~systemActive~0 1)))) (and (or (and .cse0 .cse1) .cse2 .cse3) (or .cse4 .cse3) (or .cse5 .cse4 .cse6) (or (and .cse0 .cse7 .cse8 .cse1) .cse2 .cse5 .cse6) (or (and .cse8 .cse7) .cse2 .cse5 .cse3))) [2021-12-17 15:08:06,046 INFO L854 garLoopResultBuilder]: At program point L161(lines 156 163) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~systemActive~0 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1) (or .cse2 .cse3 .cse4) (or .cse3 .cse0 .cse4) (or .cse2 .cse1))) [2021-12-17 15:08:06,046 INFO L858 garLoopResultBuilder]: For program point L479(lines 479 487) no Hoare annotation was computed. [2021-12-17 15:08:06,046 INFO L858 garLoopResultBuilder]: For program point L475(lines 475 492) no Hoare annotation was computed. [2021-12-17 15:08:06,046 INFO L854 garLoopResultBuilder]: At program point L182(line 182) the Hoare annotation is: (let ((.cse10 (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|)) (.cse5 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse9 (= ~pumpRunning~0 0))) (let ((.cse0 (and .cse10 .cse5 .cse9)) (.cse3 (not (= ~systemActive~0 0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse7 (and .cse5 .cse10)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse3) (or (and .cse5 .cse6) .cse7 .cse1 .cse2 .cse8) (or .cse4 .cse8 .cse9) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse2 .cse8 .cse9) (or .cse7 .cse4 .cse1 .cse8)))) [2021-12-17 15:08:06,046 INFO L858 garLoopResultBuilder]: For program point L182-1(line 182) no Hoare annotation was computed. [2021-12-17 15:08:06,046 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 387 410) the Hoare annotation is: (let ((.cse8 (= ~methAndRunningLastTime~0 |old(~methAndRunningLastTime~0)|)) (.cse7 (= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse0 (and .cse8 .cse7 (= ~pumpRunning~0 0))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~systemActive~0 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and .cse7 .cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (.cse6 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse1 .cse3) (or .cse4 .cse5 .cse6) (or .cse2 .cse5 .cse6)))) [2021-12-17 15:08:06,046 INFO L858 garLoopResultBuilder]: For program point L398-1(lines 398 404) no Hoare annotation was computed. [2021-12-17 15:08:06,046 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 387 410) no Hoare annotation was computed. [2021-12-17 15:08:06,046 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 160) no Hoare annotation was computed. [2021-12-17 15:08:06,046 INFO L854 garLoopResultBuilder]: At program point L485(line 485) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= ~systemActive~0 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse0 .cse4) (or .cse0 .cse1 .cse4) (or .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2021-12-17 15:08:06,047 INFO L861 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2021-12-17 15:08:06,047 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2021-12-17 15:08:06,047 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2021-12-17 15:08:06,047 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2021-12-17 15:08:06,047 INFO L861 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2021-12-17 15:08:06,051 INFO L861 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2021-12-17 15:08:06,052 INFO L858 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2021-12-17 15:08:06,052 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2021-12-17 15:08:06,052 INFO L858 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2021-12-17 15:08:06,052 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2021-12-17 15:08:06,052 INFO L861 garLoopResultBuilder]: At program point L126(lines 118 128) the Hoare annotation is: true [2021-12-17 15:08:06,052 INFO L858 garLoopResultBuilder]: For program point L345(lines 345 351) no Hoare annotation was computed. [2021-12-17 15:08:06,052 INFO L858 garLoopResultBuilder]: For program point L345-1(lines 345 351) no Hoare annotation was computed. [2021-12-17 15:08:06,054 INFO L861 garLoopResultBuilder]: At program point L151(lines 132 154) the Hoare annotation is: true [2021-12-17 15:08:06,054 INFO L854 garLoopResultBuilder]: At program point L370(lines 325 372) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0 1)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= ~systemActive~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2) (and .cse0 .cse5 .cse4 .cse3) (and .cse0 .cse5 .cse1 .cse3))) [2021-12-17 15:08:06,054 INFO L854 garLoopResultBuilder]: At program point L337(line 337) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0 1)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= ~systemActive~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2) (and .cse0 .cse5 .cse4 .cse3) (and .cse0 .cse5 .cse1 .cse3))) [2021-12-17 15:08:06,054 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-17 15:08:06,054 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-17 15:08:06,054 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-17 15:08:06,055 INFO L854 garLoopResultBuilder]: At program point L635(lines 623 637) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (= ~systemActive~0 0)) (.cse2 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) .cse2) (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2))) [2021-12-17 15:08:06,055 INFO L858 garLoopResultBuilder]: For program point L627(lines 627 633) no Hoare annotation was computed. [2021-12-17 15:08:06,055 INFO L858 garLoopResultBuilder]: For program point L627-1(lines 627 633) no Hoare annotation was computed. [2021-12-17 15:08:06,055 INFO L854 garLoopResultBuilder]: At program point L173(lines 168 175) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:08:06,055 INFO L858 garLoopResultBuilder]: For program point L326(lines 325 372) no Hoare annotation was computed. [2021-12-17 15:08:06,055 INFO L858 garLoopResultBuilder]: For program point L355(lines 355 368) no Hoare annotation was computed. [2021-12-17 15:08:06,055 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-17 15:08:06,056 INFO L854 garLoopResultBuilder]: At program point L669(lines 664 672) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:08:06,056 INFO L854 garLoopResultBuilder]: At program point L347(line 347) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0 1)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= ~systemActive~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2) (and .cse0 .cse5 .cse4 .cse3) (and .cse0 .cse5 .cse1 .cse3))) [2021-12-17 15:08:06,056 INFO L861 garLoopResultBuilder]: At program point L376(lines 315 380) the Hoare annotation is: true [2021-12-17 15:08:06,056 INFO L854 garLoopResultBuilder]: At program point L661(lines 657 663) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:08:06,057 INFO L858 garLoopResultBuilder]: For program point L335(lines 335 341) no Hoare annotation was computed. [2021-12-17 15:08:06,057 INFO L858 garLoopResultBuilder]: For program point L335-1(lines 335 341) no Hoare annotation was computed. [2021-12-17 15:08:06,057 INFO L858 garLoopResultBuilder]: For program point L327(lines 327 331) no Hoare annotation was computed. [2021-12-17 15:08:06,057 INFO L854 garLoopResultBuilder]: At program point L629(line 629) the Hoare annotation is: (let ((.cse1 (<= 2 ~waterLevel~0)) (.cse3 (not (= 0 ~systemActive~0))) (.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse5 (= ~systemActive~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse1 .cse3) (and .cse0 .cse2 .cse5) (and .cse0 .cse4 .cse5))) [2021-12-17 15:08:06,057 INFO L854 garLoopResultBuilder]: At program point L373(lines 324 374) the Hoare annotation is: false [2021-12-17 15:08:06,057 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:08:06,057 INFO L854 garLoopResultBuilder]: At program point L654(lines 650 656) the Hoare annotation is: (and (= ~waterLevel~0 1) (= ~methaneLevelCritical~0 0) (= ~systemActive~0 1) (= ~pumpRunning~0 0)) [2021-12-17 15:08:06,058 INFO L858 garLoopResultBuilder]: For program point L142(lines 142 149) no Hoare annotation was computed. [2021-12-17 15:08:06,058 INFO L858 garLoopResultBuilder]: For program point L142-2(lines 142 149) no Hoare annotation was computed. [2021-12-17 15:08:06,058 INFO L858 garLoopResultBuilder]: For program point L361(lines 361 367) no Hoare annotation was computed. [2021-12-17 15:08:06,058 INFO L854 garLoopResultBuilder]: At program point L361-2(lines 355 368) the Hoare annotation is: (let ((.cse2 (= ~systemActive~0 1)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= ~systemActive~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= ~pumpRunning~0 0))) (or (and .cse0 .cse1 .cse2) (and .cse0 .cse3 .cse2) (and .cse0 .cse4 .cse3 .cse5) (and .cse0 .cse4 .cse1 .cse5))) [2021-12-17 15:08:06,058 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 419 443) the Hoare annotation is: (let ((.cse0 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse0 (= ~pumpRunning~0 0)) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-17 15:08:06,058 INFO L854 garLoopResultBuilder]: At program point L438(line 438) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse1))) [2021-12-17 15:08:06,058 INFO L858 garLoopResultBuilder]: For program point L438-1(lines 419 443) no Hoare annotation was computed. [2021-12-17 15:08:06,059 INFO L858 garLoopResultBuilder]: For program point L294(lines 294 300) no Hoare annotation was computed. [2021-12-17 15:08:06,059 INFO L858 garLoopResultBuilder]: For program point L511(lines 511 517) no Hoare annotation was computed. [2021-12-17 15:08:06,059 INFO L854 garLoopResultBuilder]: At program point L509(line 509) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~systemActive~0 1)))) (and (or (and .cse0 .cse1) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse2) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) .cse2))) [2021-12-17 15:08:06,059 INFO L854 garLoopResultBuilder]: At program point L511-2(lines 504 520) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) (and (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|) .cse0 (= ~pumpRunning~0 0)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2021-12-17 15:08:06,059 INFO L858 garLoopResultBuilder]: For program point L509-1(line 509) no Hoare annotation was computed. [2021-12-17 15:08:06,059 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 419 443) no Hoare annotation was computed. [2021-12-17 15:08:06,060 INFO L854 garLoopResultBuilder]: At program point L600(lines 585 603) the Hoare annotation is: (let ((.cse1 (<= 2 ~waterLevel~0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (.cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0)) (.cse2 (= ~pumpRunning~0 0)) (.cse5 (not (= ~systemActive~0 1)))) (and (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse0 .cse1 .cse2) (and .cse3 .cse0 .cse4 .cse2) (not (= ~methaneLevelCritical~0 0)) .cse5)) (or (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) (and .cse3 .cse4 .cse2) (not (= |old(~pumpRunning~0)| 0)) .cse5))) [2021-12-17 15:08:06,060 INFO L854 garLoopResultBuilder]: At program point L501(lines 496 503) the Hoare annotation is: (let ((.cse0 (not (= ~systemActive~0 1)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse0))) [2021-12-17 15:08:06,060 INFO L858 garLoopResultBuilder]: For program point L594(lines 594 598) no Hoare annotation was computed. [2021-12-17 15:08:06,061 INFO L854 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse0 (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~systemActive~0 1)))) (and (or (and .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) (not (= ~methaneLevelCritical~0 0)) .cse2) (or (and .cse0 .cse1) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse2))) [2021-12-17 15:08:06,061 INFO L858 garLoopResultBuilder]: For program point L594-2(lines 594 598) no Hoare annotation was computed. [2021-12-17 15:08:06,061 INFO L854 garLoopResultBuilder]: At program point L299(lines 290 303) the Hoare annotation is: (let ((.cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (= ~systemActive~0 1)))) (and (or (and .cse0 .cse1) (and .cse2 .cse1) (not (<= 1 ~methaneLevelCritical~0)) (not (= |old(~pumpRunning~0)| 0)) .cse3) (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse2 .cse4 .cse1) (and .cse4 .cse0 .cse1) (not (= ~methaneLevelCritical~0 0)) .cse3)))) [2021-12-17 15:08:06,061 INFO L858 garLoopResultBuilder]: For program point L427(lines 427 435) no Hoare annotation was computed. [2021-12-17 15:08:06,061 INFO L858 garLoopResultBuilder]: For program point L423(lines 423 440) no Hoare annotation was computed. [2021-12-17 15:08:06,062 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 225 236) no Hoare annotation was computed. [2021-12-17 15:08:06,062 INFO L858 garLoopResultBuilder]: For program point L229-1(lines 225 236) no Hoare annotation was computed. [2021-12-17 15:08:06,062 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 225 236) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (not (= ~systemActive~0 0))) (.cse2 (= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= ~systemActive~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse2 .cse5 .cse3) (or .cse2 .cse5 .cse4))) [2021-12-17 15:08:06,062 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 529 539) the Hoare annotation is: true [2021-12-17 15:08:06,062 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 529 539) no Hoare annotation was computed. [2021-12-17 15:08:06,062 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 529 539) no Hoare annotation was computed. [2021-12-17 15:08:06,062 INFO L861 garLoopResultBuilder]: At program point L534(line 534) the Hoare annotation is: true [2021-12-17 15:08:06,063 INFO L858 garLoopResultBuilder]: For program point L534-1(line 534) no Hoare annotation was computed. [2021-12-17 15:08:06,065 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-17 15:08:06,067 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-17 15:08:06,100 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.12 03:08:06 BoogieIcfgContainer [2021-12-17 15:08:06,106 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-17 15:08:06,107 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-17 15:08:06,107 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-17 15:08:06,107 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-17 15:08:06,108 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.12 03:07:56" (3/4) ... [2021-12-17 15:08:06,110 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-17 15:08:06,116 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2021-12-17 15:08:06,116 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-17 15:08:06,116 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-17 15:08:06,116 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-17 15:08:06,116 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-17 15:08:06,116 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-17 15:08:06,117 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2021-12-17 15:08:06,117 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-17 15:08:06,117 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-17 15:08:06,117 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-17 15:08:06,131 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2021-12-17 15:08:06,132 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-17 15:08:06,132 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-17 15:08:06,133 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-17 15:08:06,133 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-17 15:08:06,133 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:08:06,134 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-17 15:08:06,154 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((!(1 <= methaneLevelCritical) || pumpRunning == \old(pumpRunning)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-17 15:08:06,155 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((waterLevel == \old(waterLevel) && 2 <= waterLevel) || (waterLevel == \old(waterLevel) && methAndRunningLastTime == \old(methAndRunningLastTime))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(systemActive == 1)) || pumpRunning == 0)) && ((((pumpRunning == \old(pumpRunning) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || pumpRunning == 0)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((waterLevel == \old(waterLevel) && methAndRunningLastTime == \old(methAndRunningLastTime)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-17 15:08:06,156 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((waterLevel == \old(waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(systemActive == 1)) || pumpRunning == 0)) && (((((tmp == 0 && 2 <= waterLevel) || (tmp == 0 && pumpRunning == \old(pumpRunning))) || (tmp == 0 && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((tmp == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(systemActive == 0))) && (((!(1 <= methaneLevelCritical) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) [2021-12-17 15:08:06,157 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\result == 0 && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) && (!(methaneLevelCritical == 0) || !(systemActive == 1))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((((\result == 0 && methAndRunningLastTime == \old(methAndRunningLastTime)) && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((waterLevel == \old(waterLevel) && methAndRunningLastTime == \old(methAndRunningLastTime)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-17 15:08:06,157 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || ((methaneLevelCritical <= tmp && 2 <= waterLevel) && pumpRunning == 0)) || !(systemActive == 1)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-17 15:08:06,157 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-17 15:08:06,159 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-17 15:08:06,159 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && pumpRunning == 0) || (\result == 1 && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((((\result == 1 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-17 15:08:06,160 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(methaneLevelCritical == 0) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && (!(1 <= methaneLevelCritical) || !(systemActive == 1)) [2021-12-17 15:08:06,163 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) [2021-12-17 15:08:06,163 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0) || (((\result == 0 && pumpRunning == \old(pumpRunning)) && tmp___0 == 0) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || ((\result == 0 && tmp___0 == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) [2021-12-17 15:08:06,202 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-17 15:08:06,202 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-17 15:08:06,202 INFO L158 Benchmark]: Toolchain (without parser) took 11213.28ms. Allocated memory was 79.7MB in the beginning and 176.2MB in the end (delta: 96.5MB). Free memory was 46.3MB in the beginning and 107.5MB in the end (delta: -61.2MB). Peak memory consumption was 35.7MB. Max. memory is 16.1GB. [2021-12-17 15:08:06,203 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 79.7MB. Free memory was 59.0MB in the beginning and 59.0MB in the end (delta: 27.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-12-17 15:08:06,203 INFO L158 Benchmark]: CACSL2BoogieTranslator took 570.25ms. Allocated memory was 79.7MB in the beginning and 100.7MB in the end (delta: 21.0MB). Free memory was 46.2MB in the beginning and 66.4MB in the end (delta: -20.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-17 15:08:06,203 INFO L158 Benchmark]: Boogie Procedure Inliner took 77.12ms. Allocated memory is still 100.7MB. Free memory was 66.4MB in the beginning and 63.9MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:08:06,204 INFO L158 Benchmark]: Boogie Preprocessor took 34.90ms. Allocated memory is still 100.7MB. Free memory was 63.9MB in the beginning and 62.2MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-17 15:08:06,205 INFO L158 Benchmark]: RCFGBuilder took 499.11ms. Allocated memory is still 100.7MB. Free memory was 62.2MB in the beginning and 45.0MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-12-17 15:08:06,206 INFO L158 Benchmark]: TraceAbstraction took 9928.72ms. Allocated memory was 100.7MB in the beginning and 176.2MB in the end (delta: 75.5MB). Free memory was 44.1MB in the beginning and 115.9MB in the end (delta: -71.8MB). Peak memory consumption was 71.4MB. Max. memory is 16.1GB. [2021-12-17 15:08:06,207 INFO L158 Benchmark]: Witness Printer took 95.16ms. Allocated memory is still 176.2MB. Free memory was 114.9MB in the beginning and 107.5MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2021-12-17 15:08:06,208 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 79.7MB. Free memory was 59.0MB in the beginning and 59.0MB in the end (delta: 27.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 570.25ms. Allocated memory was 79.7MB in the beginning and 100.7MB in the end (delta: 21.0MB). Free memory was 46.2MB in the beginning and 66.4MB in the end (delta: -20.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 77.12ms. Allocated memory is still 100.7MB. Free memory was 66.4MB in the beginning and 63.9MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.90ms. Allocated memory is still 100.7MB. Free memory was 63.9MB in the beginning and 62.2MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 499.11ms. Allocated memory is still 100.7MB. Free memory was 62.2MB in the beginning and 45.0MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 9928.72ms. Allocated memory was 100.7MB in the beginning and 176.2MB in the end (delta: 75.5MB). Free memory was 44.1MB in the beginning and 115.9MB in the end (delta: -71.8MB). Peak memory consumption was 71.4MB. Max. memory is 16.1GB. * Witness Printer took 95.16ms. Allocated memory is still 176.2MB. Free memory was 114.9MB in the beginning and 107.5MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 160]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 114 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.8s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.8s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1583 SdHoareTripleChecker+Valid, 1.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1545 mSDsluCounter, 4944 SdHoareTripleChecker+Invalid, 1.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3344 mSDsCounter, 523 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1930 IncrementalHoareTripleChecker+Invalid, 2453 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 523 mSolverCounterUnsat, 1600 mSDtfsCounter, 1930 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 402 GetRequests, 302 SyntacticMatches, 2 SemanticMatches, 98 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 156 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1174occurred in iteration=8, InterpolantAutomatonStates: 82, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 107 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 52 LocationsWithAnnotation, 2815 PreInvPairs, 3100 NumberOfFragments, 2004 HoareAnnotationTreeSize, 2815 FomulaSimplifications, 1644 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 52 FomulaSimplificationsInter, 14171 FormulaSimplificationTreeSizeReductionInter, 3.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 828 NumberOfCodeBlocks, 828 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 815 ConstructedInterpolants, 0 QuantifiedInterpolants, 1557 SizeOfPredicates, 6 NumberOfNonLiveVariables, 937 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 121/135 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 471]: Loop Invariant Derived loop invariant: (((((((((waterLevel == \old(waterLevel) && 2 <= waterLevel) || (waterLevel == \old(waterLevel) && methAndRunningLastTime == \old(methAndRunningLastTime))) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(systemActive == 1)) || pumpRunning == 0)) && ((((pumpRunning == \old(pumpRunning) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) || pumpRunning == 0)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((waterLevel == \old(waterLevel) && methAndRunningLastTime == \old(methAndRunningLastTime)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 304]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 604]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 585]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0) || (((\result == 0 && pumpRunning == \old(pumpRunning)) && tmp___0 == 0) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && (((((2 <= waterLevel && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || ((\result == 0 && tmp___0 == 0) && pumpRunning == 0)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (((((splverifierCounter == 0 && 1 <= methaneLevelCritical) && systemActive == 1) && pumpRunning == 0) || ((splverifierCounter == 0 && methaneLevelCritical == 0) && systemActive == 1)) || (((splverifierCounter == 0 && systemActive == 0) && methaneLevelCritical == 0) && pumpRunning == 0)) || (((splverifierCounter == 0 && systemActive == 0) && 1 <= methaneLevelCritical) && pumpRunning == 0) - InvariantResult [Line: 213]: Loop Invariant Derived loop invariant: ((((((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((!(1 <= methaneLevelCritical) || pumpRunning == \old(pumpRunning)) || !(systemActive == 1))) && ((pumpRunning == \old(pumpRunning) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: (((splverifierCounter == 0 && systemActive == 0) && methaneLevelCritical == 0) && pumpRunning == 0) || (((splverifierCounter == 0 && systemActive == 0) && 1 <= methaneLevelCritical) && pumpRunning == 0) - InvariantResult [Line: 650]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 156]: Loop Invariant Derived loop invariant: (((!(methaneLevelCritical == 0) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && (!(1 <= methaneLevelCritical) || !(systemActive == 1)) - InvariantResult [Line: 504]: Loop Invariant Derived loop invariant: (((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || ((methaneLevelCritical <= tmp && 2 <= waterLevel) && pumpRunning == 0)) || !(systemActive == 1)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 664]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((waterLevel == 1 && methaneLevelCritical == 0) && systemActive == 1) && pumpRunning == 0 - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: ((((((\result == 0 && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(systemActive == 1)) && (!(methaneLevelCritical == 0) || !(systemActive == 1))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(systemActive == 0))) && ((((((\result == 0 && methAndRunningLastTime == \old(methAndRunningLastTime)) && waterLevel == \old(waterLevel)) && pumpRunning == 0) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0))) && ((((waterLevel == \old(waterLevel) && methAndRunningLastTime == \old(methAndRunningLastTime)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && pumpRunning == 0) || (\result == 1 && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && (((((\result == 1 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) || ((pumpRunning == \old(pumpRunning) && 2 <= waterLevel) && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: ((!(1 <= methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(systemActive == 1)) && ((2 <= waterLevel || !(methaneLevelCritical == 0)) || !(systemActive == 1)) - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 176]: Loop Invariant Derived loop invariant: (((((((waterLevel == \old(waterLevel) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1)) && ((!(1 <= methaneLevelCritical) || !(systemActive == 1)) || pumpRunning == 0)) && (((((tmp == 0 && 2 <= waterLevel) || (tmp == 0 && pumpRunning == \old(pumpRunning))) || (tmp == 0 && pumpRunning == 0)) || !(methaneLevelCritical == 0)) || !(systemActive == 1))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((tmp == 0 && waterLevel == \old(waterLevel)) && pumpRunning == 0)) || !(systemActive == 0))) && (((!(1 <= methaneLevelCritical) || waterLevel == \old(waterLevel)) || !(\old(pumpRunning) == 0)) || !(systemActive == 1))) && ((((waterLevel == \old(waterLevel) && pumpRunning == \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || !(\old(pumpRunning) == 0)) || !(systemActive == 0)) - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2021-12-17 15:08:06,267 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE