./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ff03de63 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product45.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 69f20c6619059452dea710c235d91f0e8ca980fcacc48c7e37668ab8a6397c50 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-ff03de6 [2021-12-21 13:14:44,427 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-21 13:14:44,444 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-21 13:14:44,486 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-21 13:14:44,486 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-21 13:14:44,487 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-21 13:14:44,487 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-21 13:14:44,488 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-21 13:14:44,494 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-21 13:14:44,496 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-21 13:14:44,496 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-21 13:14:44,498 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-21 13:14:44,498 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-21 13:14:44,501 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-21 13:14:44,502 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-21 13:14:44,504 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-21 13:14:44,505 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-21 13:14:44,506 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-21 13:14:44,507 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-21 13:14:44,515 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-21 13:14:44,518 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-21 13:14:44,519 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-21 13:14:44,519 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-21 13:14:44,520 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-21 13:14:44,536 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-21 13:14:44,540 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-21 13:14:44,541 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-21 13:14:44,542 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-21 13:14:44,542 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-21 13:14:44,543 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-21 13:14:44,543 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-21 13:14:44,544 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-21 13:14:44,544 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-21 13:14:44,545 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-21 13:14:44,546 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-21 13:14:44,547 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-21 13:14:44,548 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-21 13:14:44,549 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-21 13:14:44,549 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-21 13:14:44,550 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-21 13:14:44,550 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-21 13:14:44,552 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2021-12-21 13:14:44,590 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-21 13:14:44,592 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-21 13:14:44,592 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-21 13:14:44,592 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-21 13:14:44,593 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-12-21 13:14:44,593 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-12-21 13:14:44,594 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-21 13:14:44,594 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-21 13:14:44,594 INFO L138 SettingsManager]: * Use SBE=true [2021-12-21 13:14:44,594 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-21 13:14:44,595 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-21 13:14:44,595 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-21 13:14:44,595 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-21 13:14:44,595 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-21 13:14:44,595 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-12-21 13:14:44,596 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-12-21 13:14:44,596 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-12-21 13:14:44,596 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-21 13:14:44,596 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-21 13:14:44,596 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-21 13:14:44,596 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-12-21 13:14:44,597 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-21 13:14:44,597 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-21 13:14:44,597 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-12-21 13:14:44,597 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:14:44,597 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-21 13:14:44,597 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-12-21 13:14:44,598 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-12-21 13:14:44,599 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-21 13:14:44,599 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-12-21 13:14:44,599 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-12-21 13:14:44,599 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-12-21 13:14:44,599 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-12-21 13:14:44,607 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-21 13:14:44,607 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 69f20c6619059452dea710c235d91f0e8ca980fcacc48c7e37668ab8a6397c50 [2021-12-21 13:14:44,858 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-21 13:14:44,888 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-21 13:14:44,890 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-21 13:14:44,891 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-21 13:14:44,891 INFO L275 PluginConnector]: CDTParser initialized [2021-12-21 13:14:44,892 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product45.cil.c [2021-12-21 13:14:44,959 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/130c755ef/2d8b680e3ad54fa7ab1aa1e1802c3283/FLAG7b7870fb4 [2021-12-21 13:14:45,294 INFO L306 CDTParser]: Found 1 translation units. [2021-12-21 13:14:45,295 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product45.cil.c [2021-12-21 13:14:45,321 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/130c755ef/2d8b680e3ad54fa7ab1aa1e1802c3283/FLAG7b7870fb4 [2021-12-21 13:14:45,692 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/130c755ef/2d8b680e3ad54fa7ab1aa1e1802c3283 [2021-12-21 13:14:45,694 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-21 13:14:45,695 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-21 13:14:45,696 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-21 13:14:45,696 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-21 13:14:45,698 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-21 13:14:45,699 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:14:45" (1/1) ... [2021-12-21 13:14:45,699 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@420c22dc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:45, skipping insertion in model container [2021-12-21 13:14:45,700 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.12 01:14:45" (1/1) ... [2021-12-21 13:14:45,704 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-21 13:14:45,728 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-21 13:14:46,018 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product45.cil.c[11292,11305] [2021-12-21 13:14:46,087 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:14:46,125 INFO L203 MainTranslator]: Completed pre-run [2021-12-21 13:14:46,187 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product45.cil.c[11292,11305] [2021-12-21 13:14:46,222 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-21 13:14:46,238 INFO L208 MainTranslator]: Completed translation [2021-12-21 13:14:46,239 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:46 WrapperNode [2021-12-21 13:14:46,239 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-21 13:14:46,240 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-21 13:14:46,240 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-21 13:14:46,240 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-21 13:14:46,262 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:46" (1/1) ... [2021-12-21 13:14:46,283 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:46" (1/1) ... [2021-12-21 13:14:46,336 INFO L137 Inliner]: procedures = 55, calls = 156, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 246 [2021-12-21 13:14:46,347 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-21 13:14:46,348 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-21 13:14:46,348 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-21 13:14:46,348 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-21 13:14:46,357 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:46" (1/1) ... [2021-12-21 13:14:46,361 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:46" (1/1) ... [2021-12-21 13:14:46,363 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:46" (1/1) ... [2021-12-21 13:14:46,363 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:46" (1/1) ... [2021-12-21 13:14:46,366 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:46" (1/1) ... [2021-12-21 13:14:46,388 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:46" (1/1) ... [2021-12-21 13:14:46,389 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:46" (1/1) ... [2021-12-21 13:14:46,391 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-21 13:14:46,400 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-21 13:14:46,400 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-21 13:14:46,400 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-21 13:14:46,401 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:46" (1/1) ... [2021-12-21 13:14:46,408 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-12-21 13:14:46,415 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:14:46,457 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-12-21 13:14:46,503 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-12-21 13:14:46,529 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-21 13:14:46,530 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2021-12-21 13:14:46,530 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2021-12-21 13:14:46,530 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2021-12-21 13:14:46,530 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2021-12-21 13:14:46,530 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2021-12-21 13:14:46,530 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2021-12-21 13:14:46,531 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2021-12-21 13:14:46,531 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2021-12-21 13:14:46,531 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2021-12-21 13:14:46,531 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2021-12-21 13:14:46,531 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:14:46,532 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:14:46,532 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2021-12-21 13:14:46,532 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2021-12-21 13:14:46,532 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-21 13:14:46,532 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2021-12-21 13:14:46,532 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2021-12-21 13:14:46,532 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-21 13:14:46,532 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-21 13:14:46,579 INFO L234 CfgBuilder]: Building ICFG [2021-12-21 13:14:46,580 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-21 13:14:46,842 INFO L275 CfgBuilder]: Performing block encoding [2021-12-21 13:14:46,848 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-21 13:14:46,848 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2021-12-21 13:14:46,850 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:14:46 BoogieIcfgContainer [2021-12-21 13:14:46,850 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-21 13:14:46,851 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-12-21 13:14:46,851 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-12-21 13:14:46,854 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-12-21 13:14:46,854 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.12 01:14:45" (1/3) ... [2021-12-21 13:14:46,854 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@405939a2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:14:46, skipping insertion in model container [2021-12-21 13:14:46,855 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.12 01:14:46" (2/3) ... [2021-12-21 13:14:46,855 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@405939a2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.12 01:14:46, skipping insertion in model container [2021-12-21 13:14:46,855 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:14:46" (3/3) ... [2021-12-21 13:14:46,856 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product45.cil.c [2021-12-21 13:14:46,859 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-12-21 13:14:46,860 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-12-21 13:14:46,890 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-12-21 13:14:46,894 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-12-21 13:14:46,895 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-12-21 13:14:46,906 INFO L276 IsEmpty]: Start isEmpty. Operand has 95 states, 71 states have (on average 1.380281690140845) internal successors, (98), 79 states have internal predecessors, (98), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2021-12-21 13:14:46,911 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2021-12-21 13:14:46,911 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:46,912 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:46,912 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:46,916 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:46,916 INFO L85 PathProgramCache]: Analyzing trace with hash 1869668402, now seen corresponding path program 1 times [2021-12-21 13:14:46,931 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:46,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2074941093] [2021-12-21 13:14:46,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:46,932 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:47,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2021-12-21 13:14:47,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,066 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:47,067 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:47,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2074941093] [2021-12-21 13:14:47,067 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2074941093] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:47,068 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:47,068 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-12-21 13:14:47,069 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1532702373] [2021-12-21 13:14:47,069 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:47,072 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-12-21 13:14:47,072 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:47,089 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-12-21 13:14:47,090 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:14:47,091 INFO L87 Difference]: Start difference. First operand has 95 states, 71 states have (on average 1.380281690140845) internal successors, (98), 79 states have internal predecessors, (98), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:47,127 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:47,128 INFO L93 Difference]: Finished difference Result 181 states and 246 transitions. [2021-12-21 13:14:47,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-12-21 13:14:47,130 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2021-12-21 13:14:47,130 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:47,136 INFO L225 Difference]: With dead ends: 181 [2021-12-21 13:14:47,136 INFO L226 Difference]: Without dead ends: 86 [2021-12-21 13:14:47,140 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-12-21 13:14:47,143 INFO L933 BasicCegarLoop]: 120 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:47,145 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:47,157 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2021-12-21 13:14:47,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2021-12-21 13:14:47,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.3125) internal successors, (84), 71 states have internal predecessors, (84), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2021-12-21 13:14:47,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 111 transitions. [2021-12-21 13:14:47,189 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 111 transitions. Word has length 25 [2021-12-21 13:14:47,189 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:47,189 INFO L470 AbstractCegarLoop]: Abstraction has 86 states and 111 transitions. [2021-12-21 13:14:47,190 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:47,190 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 111 transitions. [2021-12-21 13:14:47,192 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-12-21 13:14:47,193 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:47,193 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:47,193 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-12-21 13:14:47,194 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:47,198 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:47,199 INFO L85 PathProgramCache]: Analyzing trace with hash 224653099, now seen corresponding path program 1 times [2021-12-21 13:14:47,199 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:47,200 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1681621428] [2021-12-21 13:14:47,200 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:47,200 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:47,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-12-21 13:14:47,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,297 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:47,298 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:47,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1681621428] [2021-12-21 13:14:47,298 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1681621428] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:47,298 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:47,298 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:14:47,298 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1263303521] [2021-12-21 13:14:47,299 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:47,300 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:14:47,300 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:47,300 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:14:47,300 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:47,301 INFO L87 Difference]: Start difference. First operand 86 states and 111 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:47,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:47,318 INFO L93 Difference]: Finished difference Result 137 states and 177 transitions. [2021-12-21 13:14:47,320 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:14:47,320 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2021-12-21 13:14:47,320 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:47,321 INFO L225 Difference]: With dead ends: 137 [2021-12-21 13:14:47,321 INFO L226 Difference]: Without dead ends: 77 [2021-12-21 13:14:47,323 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:47,324 INFO L933 BasicCegarLoop]: 98 mSDtfsCounter, 12 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 180 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:47,326 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 180 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:47,327 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2021-12-21 13:14:47,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2021-12-21 13:14:47,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 58 states have (on average 1.3275862068965518) internal successors, (77), 65 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-21 13:14:47,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 99 transitions. [2021-12-21 13:14:47,338 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 99 transitions. Word has length 26 [2021-12-21 13:14:47,338 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:47,338 INFO L470 AbstractCegarLoop]: Abstraction has 77 states and 99 transitions. [2021-12-21 13:14:47,338 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:47,338 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 99 transitions. [2021-12-21 13:14:47,339 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2021-12-21 13:14:47,339 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:47,339 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:47,340 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-12-21 13:14:47,340 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:47,340 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:47,340 INFO L85 PathProgramCache]: Analyzing trace with hash 13787135, now seen corresponding path program 1 times [2021-12-21 13:14:47,340 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:47,341 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [605950085] [2021-12-21 13:14:47,341 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:47,341 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:47,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:14:47,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,399 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:47,399 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:47,399 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [605950085] [2021-12-21 13:14:47,400 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [605950085] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:47,400 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:47,400 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-21 13:14:47,400 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1979733243] [2021-12-21 13:14:47,400 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:47,401 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-12-21 13:14:47,401 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:47,401 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-21 13:14:47,401 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:47,402 INFO L87 Difference]: Start difference. First operand 77 states and 99 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:47,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:47,411 INFO L93 Difference]: Finished difference Result 146 states and 191 transitions. [2021-12-21 13:14:47,412 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-21 13:14:47,412 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2021-12-21 13:14:47,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:47,413 INFO L225 Difference]: With dead ends: 146 [2021-12-21 13:14:47,413 INFO L226 Difference]: Without dead ends: 77 [2021-12-21 13:14:47,414 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-21 13:14:47,414 INFO L933 BasicCegarLoop]: 97 mSDtfsCounter, 80 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:47,415 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [80 Valid, 97 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:47,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2021-12-21 13:14:47,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2021-12-21 13:14:47,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 65 states have internal predecessors, (76), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2021-12-21 13:14:47,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 98 transitions. [2021-12-21 13:14:47,421 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 98 transitions. Word has length 30 [2021-12-21 13:14:47,421 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:47,421 INFO L470 AbstractCegarLoop]: Abstraction has 77 states and 98 transitions. [2021-12-21 13:14:47,422 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2021-12-21 13:14:47,422 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 98 transitions. [2021-12-21 13:14:47,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2021-12-21 13:14:47,423 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:47,423 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:47,423 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-12-21 13:14:47,423 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:47,424 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:47,424 INFO L85 PathProgramCache]: Analyzing trace with hash 689914158, now seen corresponding path program 1 times [2021-12-21 13:14:47,424 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:47,424 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1849230728] [2021-12-21 13:14:47,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:47,424 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:47,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:14:47,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:14:47,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2021-12-21 13:14:47,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,480 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:47,481 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:47,481 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1849230728] [2021-12-21 13:14:47,481 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1849230728] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:47,481 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:47,481 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-21 13:14:47,481 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [676471882] [2021-12-21 13:14:47,482 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:47,482 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-12-21 13:14:47,482 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:47,482 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-21 13:14:47,483 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-21 13:14:47,483 INFO L87 Difference]: Start difference. First operand 77 states and 98 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-21 13:14:47,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:47,664 INFO L93 Difference]: Finished difference Result 226 states and 288 transitions. [2021-12-21 13:14:47,664 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-21 13:14:47,664 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 40 [2021-12-21 13:14:47,665 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:47,666 INFO L225 Difference]: With dead ends: 226 [2021-12-21 13:14:47,666 INFO L226 Difference]: Without dead ends: 157 [2021-12-21 13:14:47,666 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2021-12-21 13:14:47,667 INFO L933 BasicCegarLoop]: 134 mSDtfsCounter, 181 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 106 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 305 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 106 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:47,668 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [183 Valid, 305 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:14:47,668 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2021-12-21 13:14:47,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 151. [2021-12-21 13:14:47,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 151 states, 114 states have (on average 1.2719298245614035) internal successors, (145), 122 states have internal predecessors, (145), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2021-12-21 13:14:47,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151 states to 151 states and 186 transitions. [2021-12-21 13:14:47,680 INFO L78 Accepts]: Start accepts. Automaton has 151 states and 186 transitions. Word has length 40 [2021-12-21 13:14:47,680 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:47,680 INFO L470 AbstractCegarLoop]: Abstraction has 151 states and 186 transitions. [2021-12-21 13:14:47,680 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2021-12-21 13:14:47,680 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states and 186 transitions. [2021-12-21 13:14:47,681 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2021-12-21 13:14:47,681 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:47,681 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:47,682 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-12-21 13:14:47,682 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:47,682 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:47,682 INFO L85 PathProgramCache]: Analyzing trace with hash 603540022, now seen corresponding path program 1 times [2021-12-21 13:14:47,682 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:47,683 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1165086460] [2021-12-21 13:14:47,683 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:47,683 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:47,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:14:47,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:47,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2021-12-21 13:14:47,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,738 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:47,738 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:47,738 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1165086460] [2021-12-21 13:14:47,739 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1165086460] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:47,739 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:47,739 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:14:47,739 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [815517187] [2021-12-21 13:14:47,739 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:47,740 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:14:47,740 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:47,740 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:14:47,740 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:47,740 INFO L87 Difference]: Start difference. First operand 151 states and 186 transitions. Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:14:47,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:47,919 INFO L93 Difference]: Finished difference Result 437 states and 546 transitions. [2021-12-21 13:14:47,919 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-12-21 13:14:47,920 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2021-12-21 13:14:47,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:47,922 INFO L225 Difference]: With dead ends: 437 [2021-12-21 13:14:47,922 INFO L226 Difference]: Without dead ends: 294 [2021-12-21 13:14:47,923 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2021-12-21 13:14:47,923 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 148 mSDsluCounter, 344 mSDsCounter, 0 mSdLazyCounter, 209 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 440 SdHoareTripleChecker+Invalid, 264 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 209 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:47,924 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [157 Valid, 440 Invalid, 264 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 209 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:14:47,925 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2021-12-21 13:14:47,940 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 280. [2021-12-21 13:14:47,940 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 280 states, 207 states have (on average 1.2318840579710144) internal successors, (255), 222 states have internal predecessors, (255), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2021-12-21 13:14:47,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 280 states to 280 states and 339 transitions. [2021-12-21 13:14:47,941 INFO L78 Accepts]: Start accepts. Automaton has 280 states and 339 transitions. Word has length 46 [2021-12-21 13:14:47,942 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:47,942 INFO L470 AbstractCegarLoop]: Abstraction has 280 states and 339 transitions. [2021-12-21 13:14:47,942 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2021-12-21 13:14:47,942 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 339 transitions. [2021-12-21 13:14:47,943 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2021-12-21 13:14:47,943 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:47,943 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:47,944 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-12-21 13:14:47,944 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:47,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:47,944 INFO L85 PathProgramCache]: Analyzing trace with hash 735697106, now seen corresponding path program 1 times [2021-12-21 13:14:47,944 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:47,945 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [804962181] [2021-12-21 13:14:47,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:47,945 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:47,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:14:47,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:14:47,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:47,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:48,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-12-21 13:14:48,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,010 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:48,010 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:48,010 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [804962181] [2021-12-21 13:14:48,010 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [804962181] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:48,010 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:48,010 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:14:48,010 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1116093251] [2021-12-21 13:14:48,011 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:48,011 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:14:48,011 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:48,011 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:14:48,012 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:48,012 INFO L87 Difference]: Start difference. First operand 280 states and 339 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-21 13:14:48,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:48,293 INFO L93 Difference]: Finished difference Result 564 states and 684 transitions. [2021-12-21 13:14:48,293 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2021-12-21 13:14:48,294 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 50 [2021-12-21 13:14:48,294 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:48,296 INFO L225 Difference]: With dead ends: 564 [2021-12-21 13:14:48,297 INFO L226 Difference]: Without dead ends: 292 [2021-12-21 13:14:48,297 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2021-12-21 13:14:48,302 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 180 mSDsluCounter, 146 mSDsCounter, 0 mSdLazyCounter, 340 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 182 SdHoareTripleChecker+Valid, 248 SdHoareTripleChecker+Invalid, 410 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 340 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:48,307 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [182 Valid, 248 Invalid, 410 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 340 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:14:48,309 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 292 states. [2021-12-21 13:14:48,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 292 to 278. [2021-12-21 13:14:48,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 205 states have (on average 1.2146341463414634) internal successors, (249), 220 states have internal predecessors, (249), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2021-12-21 13:14:48,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 333 transitions. [2021-12-21 13:14:48,330 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 333 transitions. Word has length 50 [2021-12-21 13:14:48,332 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:48,332 INFO L470 AbstractCegarLoop]: Abstraction has 278 states and 333 transitions. [2021-12-21 13:14:48,332 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2021-12-21 13:14:48,333 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 333 transitions. [2021-12-21 13:14:48,338 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-21 13:14:48,338 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:48,339 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:48,339 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-12-21 13:14:48,339 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:48,339 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:48,340 INFO L85 PathProgramCache]: Analyzing trace with hash 25989529, now seen corresponding path program 1 times [2021-12-21 13:14:48,340 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:48,340 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [459958615] [2021-12-21 13:14:48,340 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:48,340 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:48,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:14:48,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:14:48,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:48,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:14:48,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-21 13:14:48,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,420 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:14:48,420 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:48,420 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [459958615] [2021-12-21 13:14:48,420 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [459958615] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:48,420 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:48,421 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:14:48,421 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [478379050] [2021-12-21 13:14:48,421 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:48,421 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:14:48,421 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:48,422 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:14:48,422 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:48,422 INFO L87 Difference]: Start difference. First operand 278 states and 333 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:14:48,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:48,621 INFO L93 Difference]: Finished difference Result 566 states and 691 transitions. [2021-12-21 13:14:48,621 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-21 13:14:48,622 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2021-12-21 13:14:48,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:48,623 INFO L225 Difference]: With dead ends: 566 [2021-12-21 13:14:48,623 INFO L226 Difference]: Without dead ends: 296 [2021-12-21 13:14:48,624 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:14:48,624 INFO L933 BasicCegarLoop]: 89 mSDtfsCounter, 125 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 277 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 331 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 277 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:48,624 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [126 Valid, 239 Invalid, 331 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 277 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:14:48,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2021-12-21 13:14:48,634 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 284. [2021-12-21 13:14:48,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 284 states, 211 states have (on average 1.2085308056872037) internal successors, (255), 226 states have internal predecessors, (255), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2021-12-21 13:14:48,635 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 284 states to 284 states and 339 transitions. [2021-12-21 13:14:48,636 INFO L78 Accepts]: Start accepts. Automaton has 284 states and 339 transitions. Word has length 60 [2021-12-21 13:14:48,636 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:48,636 INFO L470 AbstractCegarLoop]: Abstraction has 284 states and 339 transitions. [2021-12-21 13:14:48,636 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2021-12-21 13:14:48,636 INFO L276 IsEmpty]: Start isEmpty. Operand 284 states and 339 transitions. [2021-12-21 13:14:48,637 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-21 13:14:48,637 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:48,637 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:48,637 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-12-21 13:14:48,637 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:48,638 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:48,638 INFO L85 PathProgramCache]: Analyzing trace with hash 727589403, now seen corresponding path program 1 times [2021-12-21 13:14:48,638 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:48,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [977718959] [2021-12-21 13:14:48,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:48,638 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:48,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:14:48,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:14:48,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:48,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:14:48,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-21 13:14:48,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,695 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:14:48,696 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:48,696 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [977718959] [2021-12-21 13:14:48,696 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [977718959] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:48,696 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:48,696 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-21 13:14:48,696 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [750162290] [2021-12-21 13:14:48,696 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:48,697 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2021-12-21 13:14:48,697 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:48,697 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-21 13:14:48,697 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-21 13:14:48,698 INFO L87 Difference]: Start difference. First operand 284 states and 339 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-21 13:14:48,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:48,883 INFO L93 Difference]: Finished difference Result 584 states and 711 transitions. [2021-12-21 13:14:48,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-21 13:14:48,884 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2021-12-21 13:14:48,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:48,885 INFO L225 Difference]: With dead ends: 584 [2021-12-21 13:14:48,885 INFO L226 Difference]: Without dead ends: 308 [2021-12-21 13:14:48,886 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=56, Invalid=100, Unknown=0, NotChecked=0, Total=156 [2021-12-21 13:14:48,886 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 209 mSDsluCounter, 114 mSDsCounter, 0 mSdLazyCounter, 208 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 211 SdHoareTripleChecker+Valid, 204 SdHoareTripleChecker+Invalid, 290 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 208 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:48,887 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [211 Valid, 204 Invalid, 290 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 208 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:14:48,887 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2021-12-21 13:14:48,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 288. [2021-12-21 13:14:48,895 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 288 states, 215 states have (on average 1.2046511627906977) internal successors, (259), 230 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2021-12-21 13:14:48,896 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 288 states to 288 states and 343 transitions. [2021-12-21 13:14:48,897 INFO L78 Accepts]: Start accepts. Automaton has 288 states and 343 transitions. Word has length 60 [2021-12-21 13:14:48,897 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:48,897 INFO L470 AbstractCegarLoop]: Abstraction has 288 states and 343 transitions. [2021-12-21 13:14:48,897 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2021-12-21 13:14:48,897 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 343 transitions. [2021-12-21 13:14:48,898 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2021-12-21 13:14:48,898 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:48,898 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:48,898 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-12-21 13:14:48,898 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:48,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:48,899 INFO L85 PathProgramCache]: Analyzing trace with hash 655202845, now seen corresponding path program 1 times [2021-12-21 13:14:48,899 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:48,899 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2026680244] [2021-12-21 13:14:48,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:48,899 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:48,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2021-12-21 13:14:48,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2021-12-21 13:14:48,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:48,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:14:48,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-12-21 13:14:48,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:48,954 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2021-12-21 13:14:48,954 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:48,954 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2026680244] [2021-12-21 13:14:48,954 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2026680244] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:48,954 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-21 13:14:48,954 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-21 13:14:48,955 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1997758508] [2021-12-21 13:14:48,955 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:48,955 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-12-21 13:14:48,955 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:48,955 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-21 13:14:48,956 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-21 13:14:48,956 INFO L87 Difference]: Start difference. First operand 288 states and 343 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-21 13:14:49,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:49,219 INFO L93 Difference]: Finished difference Result 790 states and 993 transitions. [2021-12-21 13:14:49,220 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-12-21 13:14:49,220 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 60 [2021-12-21 13:14:49,220 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:49,224 INFO L225 Difference]: With dead ends: 790 [2021-12-21 13:14:49,224 INFO L226 Difference]: Without dead ends: 510 [2021-12-21 13:14:49,225 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2021-12-21 13:14:49,226 INFO L933 BasicCegarLoop]: 133 mSDtfsCounter, 297 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 253 mSolverCounterSat, 129 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 299 SdHoareTripleChecker+Valid, 251 SdHoareTripleChecker+Invalid, 382 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 129 IncrementalHoareTripleChecker+Valid, 253 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:49,227 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [299 Valid, 251 Invalid, 382 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [129 Valid, 253 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-12-21 13:14:49,227 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 510 states. [2021-12-21 13:14:49,256 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 510 to 508. [2021-12-21 13:14:49,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 508 states, 379 states have (on average 1.1978891820580475) internal successors, (454), 402 states have internal predecessors, (454), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) [2021-12-21 13:14:49,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 508 states to 508 states and 621 transitions. [2021-12-21 13:14:49,262 INFO L78 Accepts]: Start accepts. Automaton has 508 states and 621 transitions. Word has length 60 [2021-12-21 13:14:49,262 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:49,262 INFO L470 AbstractCegarLoop]: Abstraction has 508 states and 621 transitions. [2021-12-21 13:14:49,263 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2021-12-21 13:14:49,263 INFO L276 IsEmpty]: Start isEmpty. Operand 508 states and 621 transitions. [2021-12-21 13:14:49,264 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2021-12-21 13:14:49,264 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:49,264 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:49,265 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-12-21 13:14:49,265 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:49,265 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:49,266 INFO L85 PathProgramCache]: Analyzing trace with hash 815870135, now seen corresponding path program 1 times [2021-12-21 13:14:49,266 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:49,266 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1780264535] [2021-12-21 13:14:49,266 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:49,266 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:49,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:49,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:14:49,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:49,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-12-21 13:14:49,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:49,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2021-12-21 13:14:49,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:49,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:49,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:49,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:14:49,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:49,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2021-12-21 13:14:49,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:49,427 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2021-12-21 13:14:49,428 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:49,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1780264535] [2021-12-21 13:14:49,428 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1780264535] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:14:49,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [972783876] [2021-12-21 13:14:49,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:49,428 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:14:49,429 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:14:49,433 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:14:49,438 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-12-21 13:14:49,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:49,554 INFO L263 TraceCheckSpWp]: Trace formula consists of 391 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-21 13:14:49,559 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:14:49,800 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-21 13:14:49,800 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:14:49,800 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [972783876] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:49,800 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:14:49,801 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2021-12-21 13:14:49,801 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [634644854] [2021-12-21 13:14:49,801 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:49,801 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-21 13:14:49,801 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:49,802 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-21 13:14:49,802 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2021-12-21 13:14:49,802 INFO L87 Difference]: Start difference. First operand 508 states and 621 transitions. Second operand has 8 states, 8 states have (on average 6.375) internal successors, (51), 6 states have internal predecessors, (51), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2021-12-21 13:14:49,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:49,913 INFO L93 Difference]: Finished difference Result 986 states and 1210 transitions. [2021-12-21 13:14:49,913 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-21 13:14:49,913 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.375) internal successors, (51), 6 states have internal predecessors, (51), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 64 [2021-12-21 13:14:49,913 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:49,915 INFO L225 Difference]: With dead ends: 986 [2021-12-21 13:14:49,915 INFO L226 Difference]: Without dead ends: 486 [2021-12-21 13:14:49,916 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2021-12-21 13:14:49,917 INFO L933 BasicCegarLoop]: 173 mSDtfsCounter, 63 mSDsluCounter, 471 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 644 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:49,917 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [67 Valid, 644 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-12-21 13:14:49,917 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 486 states. [2021-12-21 13:14:49,936 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 486 to 484. [2021-12-21 13:14:49,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 484 states, 360 states have (on average 1.1805555555555556) internal successors, (425), 382 states have internal predecessors, (425), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) [2021-12-21 13:14:49,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 484 states to 484 states and 577 transitions. [2021-12-21 13:14:49,939 INFO L78 Accepts]: Start accepts. Automaton has 484 states and 577 transitions. Word has length 64 [2021-12-21 13:14:49,939 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:49,939 INFO L470 AbstractCegarLoop]: Abstraction has 484 states and 577 transitions. [2021-12-21 13:14:49,939 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.375) internal successors, (51), 6 states have internal predecessors, (51), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2021-12-21 13:14:49,939 INFO L276 IsEmpty]: Start isEmpty. Operand 484 states and 577 transitions. [2021-12-21 13:14:49,940 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2021-12-21 13:14:49,940 INFO L506 BasicCegarLoop]: Found error trace [2021-12-21 13:14:49,941 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:49,960 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-12-21 13:14:50,158 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2021-12-21 13:14:50,158 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-12-21 13:14:50,158 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-21 13:14:50,158 INFO L85 PathProgramCache]: Analyzing trace with hash 255377162, now seen corresponding path program 1 times [2021-12-21 13:14:50,158 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-21 13:14:50,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1439295562] [2021-12-21 13:14:50,159 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:50,159 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-21 13:14:50,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-12-21 13:14:50,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-12-21 13:14:50,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2021-12-21 13:14:50,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2021-12-21 13:14:50,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:14:50,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2021-12-21 13:14:50,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-12-21 13:14:50,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2021-12-21 13:14:50,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-12-21 13:14:50,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2021-12-21 13:14:50,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-12-21 13:14:50,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2021-12-21 13:14:50,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,331 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2021-12-21 13:14:50,331 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-21 13:14:50,331 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1439295562] [2021-12-21 13:14:50,331 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1439295562] provided 0 perfect and 1 imperfect interpolant sequences [2021-12-21 13:14:50,332 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [64077852] [2021-12-21 13:14:50,332 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-21 13:14:50,332 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-12-21 13:14:50,332 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-21 13:14:50,348 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-12-21 13:14:50,358 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-12-21 13:14:50,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-21 13:14:50,439 INFO L263 TraceCheckSpWp]: Trace formula consists of 496 conjuncts, 9 conjunts are in the unsatisfiable core [2021-12-21 13:14:50,447 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-21 13:14:50,652 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2021-12-21 13:14:50,652 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-12-21 13:14:50,652 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [64077852] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-21 13:14:50,652 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-12-21 13:14:50,652 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2021-12-21 13:14:50,653 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [543653276] [2021-12-21 13:14:50,653 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-21 13:14:50,653 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-12-21 13:14:50,653 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-21 13:14:50,654 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-21 13:14:50,654 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2021-12-21 13:14:50,654 INFO L87 Difference]: Start difference. First operand 484 states and 577 transitions. Second operand has 8 states, 8 states have (on average 9.625) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2021-12-21 13:14:50,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-21 13:14:50,735 INFO L93 Difference]: Finished difference Result 827 states and 996 transitions. [2021-12-21 13:14:50,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-12-21 13:14:50,736 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.625) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 108 [2021-12-21 13:14:50,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-12-21 13:14:50,737 INFO L225 Difference]: With dead ends: 827 [2021-12-21 13:14:50,737 INFO L226 Difference]: Without dead ends: 0 [2021-12-21 13:14:50,738 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 123 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2021-12-21 13:14:50,739 INFO L933 BasicCegarLoop]: 172 mSDtfsCounter, 68 mSDsluCounter, 599 mSDsCounter, 0 mSdLazyCounter, 101 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 771 SdHoareTripleChecker+Invalid, 105 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-12-21 13:14:50,739 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [72 Valid, 771 Invalid, 105 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 101 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-12-21 13:14:50,740 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2021-12-21 13:14:50,740 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2021-12-21 13:14:50,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-21 13:14:50,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2021-12-21 13:14:50,741 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 108 [2021-12-21 13:14:50,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-12-21 13:14:50,741 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2021-12-21 13:14:50,741 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.625) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2021-12-21 13:14:50,741 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2021-12-21 13:14:50,742 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2021-12-21 13:14:50,744 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-12-21 13:14:50,778 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-12-21 13:14:50,962 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2021-12-21 13:14:50,964 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2021-12-21 13:14:53,219 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 566 572) no Hoare annotation was computed. [2021-12-21 13:14:53,220 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 566 572) the Hoare annotation is: true [2021-12-21 13:14:53,220 INFO L858 garLoopResultBuilder]: For program point L830-1(lines 826 837) no Hoare annotation was computed. [2021-12-21 13:14:53,220 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 826 837) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (not (<= 1 |old(~methaneLevelCritical~0)|))))) [2021-12-21 13:14:53,220 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 826 837) no Hoare annotation was computed. [2021-12-21 13:14:53,220 INFO L861 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 838 846) the Hoare annotation is: true [2021-12-21 13:14:53,220 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 838 846) no Hoare annotation was computed. [2021-12-21 13:14:53,220 INFO L858 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 838 846) no Hoare annotation was computed. [2021-12-21 13:14:53,221 INFO L854 garLoopResultBuilder]: At program point L944(line 944) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse8 .cse9 .cse2 .cse6 .cse5) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse9) .cse2 .cse3 (and .cse8 .cse9)) (or .cse0 .cse2 .cse6 .cse5 .cse7))) [2021-12-21 13:14:53,221 INFO L854 garLoopResultBuilder]: At program point L655(lines 650 657) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse0) .cse1 .cse2) (or .cse3 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or .cse0 .cse1 .cse4))) [2021-12-21 13:14:53,221 INFO L858 garLoopResultBuilder]: For program point L944-1(line 944) no Hoare annotation was computed. [2021-12-21 13:14:53,221 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 542 565) no Hoare annotation was computed. [2021-12-21 13:14:53,221 INFO L854 garLoopResultBuilder]: At program point L614(line 614) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))) (not (= ~methaneLevelCritical~0 0))))) [2021-12-21 13:14:53,221 INFO L858 garLoopResultBuilder]: For program point L420(line 420) no Hoare annotation was computed. [2021-12-21 13:14:53,221 INFO L854 garLoopResultBuilder]: At program point L606(line 606) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2021-12-21 13:14:53,222 INFO L858 garLoopResultBuilder]: For program point L606-1(line 606) no Hoare annotation was computed. [2021-12-21 13:14:53,222 INFO L854 garLoopResultBuilder]: At program point L619(line 619) the Hoare annotation is: (let ((.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse5 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or .cse4 .cse0 .cse3 .cse5) (or .cse4 .cse0 .cse1 .cse5) (or .cse0 .cse6 .cse3 .cse7) (or .cse0 .cse6 .cse1 .cse7))) [2021-12-21 13:14:53,222 INFO L854 garLoopResultBuilder]: At program point L619-1(lines 600 624) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse8 .cse9 .cse2 .cse6 .cse5) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse9) .cse2 .cse3 (and .cse8 .cse9)) (or .cse0 .cse2 .cse6 .cse5 .cse7))) [2021-12-21 13:14:53,222 INFO L858 garLoopResultBuilder]: For program point L553-1(lines 553 559) no Hoare annotation was computed. [2021-12-21 13:14:53,222 INFO L854 garLoopResultBuilder]: At program point L421(lines 416 423) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (not (= ~methaneLevelCritical~0 0))))) [2021-12-21 13:14:53,222 INFO L858 garLoopResultBuilder]: For program point L950(lines 950 960) no Hoare annotation was computed. [2021-12-21 13:14:53,222 INFO L858 garLoopResultBuilder]: For program point L946(lines 946 963) no Hoare annotation was computed. [2021-12-21 13:14:53,223 INFO L854 garLoopResultBuilder]: At program point L946-1(lines 938 966) the Hoare annotation is: (let ((.cse6 (<= 2 ~waterLevel~0)) (.cse12 (= 1 ~systemActive~0)) (.cse10 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse13 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not .cse13)) (.cse8 (and .cse13 .cse6 .cse12 .cse10)) (.cse2 (not .cse12)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse0 .cse2 .cse5 .cse8 .cse7) (or (and .cse9 .cse10) .cse2 (and .cse11 .cse10) .cse5 .cse8) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse9) .cse2 .cse3 (and .cse11 .cse9))))) [2021-12-21 13:14:53,223 INFO L858 garLoopResultBuilder]: For program point L806(lines 806 810) no Hoare annotation was computed. [2021-12-21 13:14:53,223 INFO L854 garLoopResultBuilder]: At program point L806-2(lines 802 813) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2021-12-21 13:14:53,223 INFO L854 garLoopResultBuilder]: At program point L674(lines 669 677) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= ~waterLevel~0 1)) (or .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_isPumpRunning_#res#1| 0))) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse3 .cse4) .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse4) .cse2)) (or .cse1 (not (= ~methaneLevelCritical~0 0))))) [2021-12-21 13:14:53,223 INFO L858 garLoopResultBuilder]: For program point L546-1(lines 545 564) no Hoare annotation was computed. [2021-12-21 13:14:53,223 INFO L858 garLoopResultBuilder]: For program point L608(lines 608 616) no Hoare annotation was computed. [2021-12-21 13:14:53,223 INFO L858 garLoopResultBuilder]: For program point L604(lines 604 621) no Hoare annotation was computed. [2021-12-21 13:14:53,224 INFO L858 garLoopResultBuilder]: For program point L951(lines 951 957) no Hoare annotation was computed. [2021-12-21 13:14:53,224 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 542 565) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse6 .cse2 .cse5) (or .cse6 .cse2 .cse3) (or .cse2 .cse7 .cse3 .cse8) (or .cse2 .cse7 .cse5 .cse8))) [2021-12-21 13:14:53,224 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 542 565) no Hoare annotation was computed. [2021-12-21 13:14:53,224 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 420) no Hoare annotation was computed. [2021-12-21 13:14:53,224 INFO L858 garLoopResultBuilder]: For program point L448(line 448) no Hoare annotation was computed. [2021-12-21 13:14:53,224 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 427 456) no Hoare annotation was computed. [2021-12-21 13:14:53,224 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 427 456) the Hoare annotation is: true [2021-12-21 13:14:53,224 INFO L858 garLoopResultBuilder]: For program point L441(lines 441 445) no Hoare annotation was computed. [2021-12-21 13:14:53,225 INFO L861 garLoopResultBuilder]: At program point L441-1(lines 441 445) the Hoare annotation is: true [2021-12-21 13:14:53,225 INFO L858 garLoopResultBuilder]: For program point L438(line 438) no Hoare annotation was computed. [2021-12-21 13:14:53,225 INFO L861 garLoopResultBuilder]: At program point L437-2(lines 437 451) the Hoare annotation is: true [2021-12-21 13:14:53,226 INFO L861 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: true [2021-12-21 13:14:53,226 INFO L858 garLoopResultBuilder]: For program point L433-1(line 433) no Hoare annotation was computed. [2021-12-21 13:14:53,226 INFO L861 garLoopResultBuilder]: At program point L452(lines 427 456) the Hoare annotation is: true [2021-12-21 13:14:53,226 INFO L854 garLoopResultBuilder]: At program point L766(line 766) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2021-12-21 13:14:53,226 INFO L854 garLoopResultBuilder]: At program point L787(lines 744 789) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2021-12-21 13:14:53,226 INFO L858 garLoopResultBuilder]: For program point L754(lines 754 760) no Hoare annotation was computed. [2021-12-21 13:14:53,227 INFO L858 garLoopResultBuilder]: For program point L754-1(lines 754 760) no Hoare annotation was computed. [2021-12-21 13:14:53,227 INFO L858 garLoopResultBuilder]: For program point L746(lines 746 750) no Hoare annotation was computed. [2021-12-21 13:14:53,227 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2021-12-21 13:14:53,227 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2021-12-21 13:14:53,227 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2021-12-21 13:14:53,227 INFO L854 garLoopResultBuilder]: At program point L924(lines 919 927) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:14:53,227 INFO L854 garLoopResultBuilder]: At program point L916(lines 912 918) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:14:53,227 INFO L858 garLoopResultBuilder]: For program point L780(lines 780 784) no Hoare annotation was computed. [2021-12-21 13:14:53,228 INFO L854 garLoopResultBuilder]: At program point L780-2(lines 774 785) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2021-12-21 13:14:53,228 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2021-12-21 13:14:53,228 INFO L858 garLoopResultBuilder]: For program point L764(lines 764 770) no Hoare annotation was computed. [2021-12-21 13:14:53,228 INFO L858 garLoopResultBuilder]: For program point L764-1(lines 764 770) no Hoare annotation was computed. [2021-12-21 13:14:53,228 INFO L861 garLoopResultBuilder]: At program point L793(lines 734 797) the Hoare annotation is: true [2021-12-21 13:14:53,228 INFO L854 garLoopResultBuilder]: At program point L756(line 756) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2021-12-21 13:14:53,228 INFO L854 garLoopResultBuilder]: At program point L909(lines 905 911) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:14:53,228 INFO L854 garLoopResultBuilder]: At program point L488(lines 484 490) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:14:53,228 INFO L858 garLoopResultBuilder]: For program point L517(lines 517 524) no Hoare annotation was computed. [2021-12-21 13:14:53,229 INFO L858 garLoopResultBuilder]: For program point L517-2(lines 517 524) no Hoare annotation was computed. [2021-12-21 13:14:53,229 INFO L854 garLoopResultBuilder]: At program point L790(lines 743 791) the Hoare annotation is: false [2021-12-21 13:14:53,229 INFO L861 garLoopResultBuilder]: At program point L501(lines 493 503) the Hoare annotation is: true [2021-12-21 13:14:53,229 INFO L861 garLoopResultBuilder]: At program point L526(lines 507 529) the Hoare annotation is: true [2021-12-21 13:14:53,229 INFO L858 garLoopResultBuilder]: For program point L745(lines 744 789) no Hoare annotation was computed. [2021-12-21 13:14:53,229 INFO L854 garLoopResultBuilder]: At program point L935(lines 930 937) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2021-12-21 13:14:53,229 INFO L858 garLoopResultBuilder]: For program point L774(lines 774 785) no Hoare annotation was computed. [2021-12-21 13:14:53,230 INFO L858 garLoopResultBuilder]: For program point L818-1(lines 814 825) no Hoare annotation was computed. [2021-12-21 13:14:53,230 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 814 825) no Hoare annotation was computed. [2021-12-21 13:14:53,230 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 814 825) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse5 .cse7) (or .cse2 .cse6 .cse3 .cse7))) [2021-12-21 13:14:53,230 INFO L858 garLoopResultBuilder]: For program point L640(lines 640 646) no Hoare annotation was computed. [2021-12-21 13:14:53,230 INFO L854 garLoopResultBuilder]: At program point L638(line 638) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2)) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2021-12-21 13:14:53,231 INFO L854 garLoopResultBuilder]: At program point L640-2(lines 633 649) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (and (= ~pumpRunning~0 0) .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1|)) (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 .cse3 .cse2))) [2021-12-21 13:14:53,231 INFO L858 garLoopResultBuilder]: For program point L638-1(line 638) no Hoare annotation was computed. [2021-12-21 13:14:53,231 INFO L854 garLoopResultBuilder]: At program point L729(lines 714 732) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~0#1| 0)) (.cse5 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~7#1| 0))) (.cse6 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (and (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or .cse0 (and .cse1 .cse2 .cse3) (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse2 .cse4 .cse5 .cse6))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse3) (and .cse2 .cse4 .cse5 .cse6)))) [2021-12-21 13:14:53,232 INFO L854 garLoopResultBuilder]: At program point L888(lines 879 892) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse4 (and .cse5 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0))))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse4)))) [2021-12-21 13:14:53,232 INFO L854 garLoopResultBuilder]: At program point L630(lines 625 632) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (<= 2 ~waterLevel~0) .cse2))) [2021-12-21 13:14:53,232 INFO L858 garLoopResultBuilder]: For program point L723(lines 723 727) no Hoare annotation was computed. [2021-12-21 13:14:53,232 INFO L858 garLoopResultBuilder]: For program point L723-2(lines 723 727) no Hoare annotation was computed. [2021-12-21 13:14:53,232 INFO L854 garLoopResultBuilder]: At program point L593(line 593) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2021-12-21 13:14:53,232 INFO L858 garLoopResultBuilder]: For program point L593-1(lines 574 598) no Hoare annotation was computed. [2021-12-21 13:14:53,232 INFO L858 garLoopResultBuilder]: For program point L883(lines 883 889) no Hoare annotation was computed. [2021-12-21 13:14:53,232 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 574 598) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2021-12-21 13:14:53,233 INFO L854 garLoopResultBuilder]: At program point L588(line 588) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0))))) [2021-12-21 13:14:53,233 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 574 598) no Hoare annotation was computed. [2021-12-21 13:14:53,233 INFO L858 garLoopResultBuilder]: For program point L582(lines 582 590) no Hoare annotation was computed. [2021-12-21 13:14:53,233 INFO L858 garLoopResultBuilder]: For program point L578(lines 578 595) no Hoare annotation was computed. [2021-12-21 13:14:53,233 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 658 668) the Hoare annotation is: true [2021-12-21 13:14:53,233 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 658 668) no Hoare annotation was computed. [2021-12-21 13:14:53,233 INFO L861 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: true [2021-12-21 13:14:53,233 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 658 668) no Hoare annotation was computed. [2021-12-21 13:14:53,233 INFO L858 garLoopResultBuilder]: For program point L663-1(line 663) no Hoare annotation was computed. [2021-12-21 13:14:53,236 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-21 13:14:53,237 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-12-21 13:14:53,266 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.12 01:14:53 BoogieIcfgContainer [2021-12-21 13:14:53,269 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-12-21 13:14:53,271 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-12-21 13:14:53,271 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-12-21 13:14:53,271 INFO L275 PluginConnector]: Witness Printer initialized [2021-12-21 13:14:53,272 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.12 01:14:46" (3/4) ... [2021-12-21 13:14:53,274 INFO L137 WitnessPrinter]: Generating witness for correct program [2021-12-21 13:14:53,278 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2021-12-21 13:14:53,279 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2021-12-21 13:14:53,279 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2021-12-21 13:14:53,279 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2021-12-21 13:14:53,279 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2021-12-21 13:14:53,279 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2021-12-21 13:14:53,279 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2021-12-21 13:14:53,279 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2021-12-21 13:14:53,288 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2021-12-21 13:14:53,288 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2021-12-21 13:14:53,289 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2021-12-21 13:14:53,289 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2021-12-21 13:14:53,289 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2021-12-21 13:14:53,289 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:14:53,290 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2021-12-21 13:14:53,305 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || !(methaneLevelCritical == 0)) [2021-12-21 13:14:53,306 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) [2021-12-21 13:14:53,307 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && tmp == 0)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && tmp == 0) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && tmp == 0)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && tmp == 0))) && ((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) [2021-12-21 13:14:53,307 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2021-12-21 13:14:53,307 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((1 <= tmp && pumpRunning == 0) && \result == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2021-12-21 13:14:53,308 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2021-12-21 13:14:53,308 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2021-12-21 13:14:53,308 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) [2021-12-21 13:14:53,308 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) [2021-12-21 13:14:53,325 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2021-12-21 13:14:53,326 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-12-21 13:14:53,326 INFO L158 Benchmark]: Toolchain (without parser) took 7631.09ms. Allocated memory was 92.3MB in the beginning and 134.2MB in the end (delta: 41.9MB). Free memory was 54.2MB in the beginning and 66.3MB in the end (delta: -12.1MB). Peak memory consumption was 27.9MB. Max. memory is 16.1GB. [2021-12-21 13:14:53,326 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 92.3MB. Free memory is still 71.0MB. There was no memory consumed. Max. memory is 16.1GB. [2021-12-21 13:14:53,326 INFO L158 Benchmark]: CACSL2BoogieTranslator took 543.12ms. Allocated memory is still 92.3MB. Free memory was 53.9MB in the beginning and 59.7MB in the end (delta: -5.8MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-21 13:14:53,327 INFO L158 Benchmark]: Boogie Procedure Inliner took 107.80ms. Allocated memory is still 92.3MB. Free memory was 59.7MB in the beginning and 57.2MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:14:53,327 INFO L158 Benchmark]: Boogie Preprocessor took 51.42ms. Allocated memory is still 92.3MB. Free memory was 57.2MB in the beginning and 55.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-12-21 13:14:53,327 INFO L158 Benchmark]: RCFGBuilder took 450.06ms. Allocated memory is still 92.3MB. Free memory was 55.5MB in the beginning and 39.6MB in the end (delta: 16.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2021-12-21 13:14:53,327 INFO L158 Benchmark]: TraceAbstraction took 6419.66ms. Allocated memory was 92.3MB in the beginning and 134.2MB in the end (delta: 41.9MB). Free memory was 38.8MB in the beginning and 73.4MB in the end (delta: -34.6MB). Peak memory consumption was 53.0MB. Max. memory is 16.1GB. [2021-12-21 13:14:53,328 INFO L158 Benchmark]: Witness Printer took 54.77ms. Allocated memory is still 134.2MB. Free memory was 73.4MB in the beginning and 66.3MB in the end (delta: 7.1MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2021-12-21 13:14:53,329 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 92.3MB. Free memory is still 71.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 543.12ms. Allocated memory is still 92.3MB. Free memory was 53.9MB in the beginning and 59.7MB in the end (delta: -5.8MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 107.80ms. Allocated memory is still 92.3MB. Free memory was 59.7MB in the beginning and 57.2MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 51.42ms. Allocated memory is still 92.3MB. Free memory was 57.2MB in the beginning and 55.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 450.06ms. Allocated memory is still 92.3MB. Free memory was 55.5MB in the beginning and 39.6MB in the end (delta: 16.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 6419.66ms. Allocated memory was 92.3MB in the beginning and 134.2MB in the end (delta: 41.9MB). Free memory was 38.8MB in the beginning and 73.4MB in the end (delta: -34.6MB). Peak memory consumption was 53.0MB. Max. memory is 16.1GB. * Witness Printer took 54.77ms. Allocated memory is still 134.2MB. Free memory was 73.4MB in the beginning and 66.3MB in the end (delta: 7.1MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 420]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 95 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.3s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.3s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1392 SdHoareTripleChecker+Valid, 1.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1363 mSDsluCounter, 3499 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2195 mSDsCounter, 455 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1644 IncrementalHoareTripleChecker+Invalid, 2099 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 455 mSolverCounterUnsat, 1304 mSDtfsCounter, 1644 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 372 GetRequests, 266 SyntacticMatches, 1 SemanticMatches, 105 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 145 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=508occurred in iteration=9, InterpolantAutomatonStates: 89, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 11 MinimizatonAttempts, 70 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 1303 PreInvPairs, 1482 NumberOfFragments, 1485 HoareAnnotationTreeSize, 1303 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 43 FomulaSimplificationsInter, 6973 FormulaSimplificationTreeSizeReductionInter, 2.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 741 NumberOfCodeBlocks, 741 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 728 ConstructedInterpolants, 0 QuantifiedInterpolants, 1428 SizeOfPredicates, 6 NumberOfNonLiveVariables, 887 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 89/103 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((1 <= tmp && pumpRunning == 0) && \result == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 938]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && tmp == 0)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && tmp == 0) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && tmp == 0)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && tmp == 0))) && ((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 744]: Loop Invariant Derived loop invariant: ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 633]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 743]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 427]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 650]: Loop Invariant Derived loop invariant: (((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 600]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 714]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 625]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 912]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: (!(1 == systemActive) || !(1 <= methaneLevelCritical)) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) RESULT: Ultimate proved your program to be correct! [2021-12-21 13:14:53,382 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE